CVE-2020-25237

HIGH

SINEC NMS < V1.0 SP1 Update 1 and SINEMA Server < V14.0 SP2 Update 2 - Path Traversal via Zip-Slip

Title source: llm
STIX 2.1

Description

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1 Update 1), SINEMA Server (All versions < V14.0 SP2 Update 2). When uploading files to an affected system using a zip container, the system does not correctly check if the relative file path of the extracted files is still within the intended target directory. With this an attacker could create or overwrite arbitrary files on an affected system. This type of vulnerability is also known as 'Zip-Slip'. (ZDI-CAN-12054)

References (3)

Core 3
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://us-cert.cisa.gov/ics/advisories/icsa-21-040-03
Third Party Advisory, VDB Entry x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-21-253/

Scores

CVSS v3 8.1
EPSS 0.0282
EPSS Percentile 86.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Details

CWE
CWE-22
Status published
Products (4)
siemens/sinec_network_management_system 1.0 (2 CPE variants)
siemens/sinec_network_management_system < 1.0
siemens/sinema_server 14.0 (4 CPE variants)
siemens/sinema_server < 14.0
Published Feb 09, 2021
Tracked Since Feb 18, 2026