Siemens SINEC NMS
view advisory published 2025-07-08
Siemens SINEC NMS before V4.0 is affected by multiple vulnerabilities which could allow an attacker to elevate privilege and exceute arbitrary code. Siemens has released a new version for SINEC NMS and recommends to update to the latest version. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40738US | — | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application does not properly validate file paths when extracting uploaded ZIP files. This coul… | ||||
| CVE-2025-40737US | — | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application does not properly validate file paths when extracting uploaded ZIP files. This coul… | ||||
| CVE-2025-40736US | —OT elevated | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application exposes an endpoint that allows an unauthorized modification of administrative cred… | ||||
| CVE-2025-40735US | — | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected devices are vulnerable to SQL injection. This could allow an unauthenticated remote attacker to… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-078892: Multiple Vulnerabilities in SINEC NMS Before V4.0 - CSAF Versionself
- SSA-078892: Multiple Vulnerabilities in SINEC NMS Before V4.0 - HTML Versionself
- ICS Advisory ICSA-25-191-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-191-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (4)
- FixedSINEC NMS
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989514/ - FixedSINEC NMS
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989514/ - FixedSINEC NMS
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989514/ - FixedSINEC NMS
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989514/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan