CVE-2021-33723

—

CVSS 3.1

6.5 medium

EPSS

<1%p48

Published

Oct 12, 2021 (Oct 12, 2021)

Modified

Jun 17, 2026

Description

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker could change the user profile of any user without proper authorization. With this, the attacker could change the password of any user in the affected system.

Vendors: siemens
Products: sinec nms
Weakness: CWE-285
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news2 stories

15 vulnerabilities discovered in Siemens industrial control management system

The RecordJan 13, 00:00 UTC · Jan 13, 2023Vulnerability CVE-2021-33723 CVE-2021-33722 CVE-2021-33727+1 CVEs

Over a Dozen Flaws Found in Siemens' Industrial Network Management System

The Hacker NewsJun 20, 05:11 UTC · Jun 20, 2022Vulnerability CVE-2021-33722 CVE-2021-33736 CVE-2021-33723+1 CVEs