Siemens SINEC NMS OS Command Injection Vulnerability

Siemens SINEC NMS is a network management system (NMS) from Siemens Germany that is used to centrally monitor, manage, and configure industrial networks with tens of thousands of devices 24/7, including safety-related areas.A security vulnerability exists in versions prior to Siemens SINEC NMS 1.0 SP2, which stems from The application incorrectly neutralized special elements when creating a batch operation that could lead to command injection. An authenticated remote attacker with administrative privileges could exploit this vulnerability to execute arbitrary code on a system with system privileges.