Siemens SINEC NMS Path Traversal Vulnerability (CNVD-2021-77584)

SINEC NMS is a network management system from Siemens for monitoring and managing industrial networks.A path traversal vulnerability exists in versions prior to SINEC NMS 1.0 SP2 Update 1, which stems from the failure of a network system or product to properly filter special elements in a resource or file path. An attacker could exploit this vulnerability to delete arbitrary files or directories under the user’s control path.