{
   gsd: {
      metadata: {
         exploitCode: "unknown",
         remediation: "unknown",
         reportConfidence: "confirmed",
         type: "vulnerability",
      },
      osvSchema: {
         aliases: [
            "CVE-2024-23811",
         ],
         details: "A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application allows users to upload arbitrary files via TFTP. This could allow an attacker to upload malicious firmware images or other files, that could potentially lead to remote code execution.",
         id: "GSD-2024-23811",
         modified: "2024-01-23T06:02:22.109178Z",
         schema_version: "1.4.0",
      },
   },
   namespaces: {
      "cve.org": {
         CVE_data_meta: {
            ASSIGNER: "productcert@siemens.com",
            ID: "CVE-2024-23811",
            STATE: "PUBLIC",
         },
         affects: {
            vendor: {
               vendor_data: [
                  {
                     product: {
                        product_data: [
                           {
                              product_name: "SINEC NMS",
                              version: {
                                 version_data: [
                                    {
                                       version_affected: "<",
                                       version_name: "0",
                                       version_value: "V2.0 SP1",
                                    },
                                 ],
                              },
                           },
                        ],
                     },
                     vendor_name: "Siemens",
                  },
               ],
            },
         },
         data_format: "MITRE",
         data_type: "CVE",
         data_version: "4.0",
         description: {
            description_data: [
               {
                  lang: "eng",
                  value: "A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application allows users to upload arbitrary files via TFTP. This could allow an attacker to upload malicious firmware images or other files, that could potentially lead to remote code execution.",
               },
            ],
         },
         impact: {
            cvss: [
               {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
            ],
         },
         problemtype: {
            problemtype_data: [
               {
                  description: [
                     {
                        cweId: "CWE-434",
                        lang: "eng",
                        value: "CWE-434: Unrestricted Upload of File with Dangerous Type",
                     },
                  ],
               },
            ],
         },
         references: {
            reference_data: [
               {
                  name: "https://cert-portal.siemens.com/productcert/html/ssa-943925.html",
                  refsource: "MISC",
                  url: "https://cert-portal.siemens.com/productcert/html/ssa-943925.html",
               },
            ],
         },
      },
      "nvd.nist.gov": {
         cve: {
            descriptions: [
               {
                  lang: "en",
                  value: "A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application allows users to upload arbitrary files via TFTP. This could allow an attacker to upload malicious firmware images or other files, that could potentially lead to remote code execution.",
               },
               {
                  lang: "es",
                  value: "Se ha identificado una vulnerabilidad en SINEC NMS (Todas las versiones &lt; V2.0 SP1). La aplicación afectada permite a los usuarios cargar archivos arbitrarios a través de TFTP. Esto podría permitir a un atacante cargar imágenes de firmware maliciosas u otros archivos, lo que podría conducir a la ejecución remota de código.",
               },
            ],
            id: "CVE-2024-23811",
            lastModified: "2024-02-13T14:01:00.987",
            metrics: {
               cvssMetricV31: [
                  {
                     cvssData: {
                        attackComplexity: "LOW",
                        attackVector: "ADJACENT_NETWORK",
                        availabilityImpact: "HIGH",
                        baseScore: 8.8,
                        baseSeverity: "HIGH",
                        confidentialityImpact: "HIGH",
                        integrityImpact: "HIGH",
                        privilegesRequired: "NONE",
                        scope: "UNCHANGED",
                        userInteraction: "NONE",
                        vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                        version: "3.1",
                     },
                     exploitabilityScore: 2.8,
                     impactScore: 5.9,
                     source: "productcert@siemens.com",
                     type: "Primary",
                  },
               ],
            },
            published: "2024-02-13T09:15:49.760",
            references: [
               {
                  source: "productcert@siemens.com",
                  url: "https://cert-portal.siemens.com/productcert/html/ssa-943925.html",
               },
            ],
            sourceIdentifier: "productcert@siemens.com",
            vulnStatus: "Awaiting Analysis",
            weaknesses: [
               {
                  description: [
                     {
                        lang: "en",
                        value: "CWE-434",
                     },
                  ],
                  source: "productcert@siemens.com",
                  type: "Primary",
               },
            ],
         },
      },
   },
}