PT-2021-11117 · Siemens · Sinema Server+1

Rgod · Published 2021-02-09 · Updated 2021-03-10 · CVE-2020-25237

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V1.0 SP1 Update 1 SINEMA Server versions prior to V14.0 SP2 Update 2

Description: A vulnerability has been identified that allows an attacker to create or overwrite arbitrary files on an affected system. This occurs when uploading files to the system using a zip container, as the system fails to correctly check if the relative file path of the extracted files is still within the intended target directory. This type of issue is also known as 'Zip-Slip'.

Recommendations: For SINEC NMS versions prior to V1.0 SP1 Update 1, update to V1.0 SP1 Update 1 or later to resolve the issue. For SINEMA Server versions prior to V14.0 SP2 Update 2, update to V14.0 SP2 Update 2 or later to resolve the issue. As a temporary workaround, consider restricting file uploads or limiting access to the extractToFolder function in FirmwareFileUtils until a patch is available.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2020-25237

ZDI-21-253

Affected Products

Sinec Nms

Sinema Server

References · 5

• https://zerodayinitiative.com/advisories/ZDI-21-253 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-25237 · Security Note
• https://osv.dev/vulnerability/CVE-2020-25237 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-156833.pdf · Vendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-21-040-03 · Note