CVE-2021-33735

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Oct 12, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-337367.2A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbit CVE-2021-337377.5A vulnerability has been identified in SIMATIC CP 343-1 (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 Advanced (incl. SIPLUS vari CVE-2021-337383.3A vulnerability has been identified in JT2Go (All versions < V13.2.0.2), Teamcenter Visualization (All versions < V13.2.0.2). The plmxmlAdap CVE-2021-337398.4Microsoft DWM Core Library Elevation of Privilege Vulnerability CVE-2021-33745.3Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash.CVE-2021-337407.8Windows Media Remote Code Execution Vulnerability CVE-2021-337418.2Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability CVE-2021-337427.5Windows MSHTML Platform Remote Code Execution Vulnerability CVE-2021-337437.8Windows Projected File System Elevation of Privilege Vulnerability CVE-2021-337445.3Windows Secure Kernel Mode Security Feature Bypass Vulnerability CVE-2021-337456.5Windows DNS Server Denial of Service Vulnerability CVE-2021-337468.0Windows DNS Server Remote Code Execution Vulnerability