Siemens SINEC NMS
view advisory published 2026-04-14
Siemens SINEC NMS when used with User Management Component (UMC) contains an authentication bypass vulnerability due to insufficient validation of user identity. This could allow an unauthenticated remote attacker to bypass authentication and gain unauthorized access to the application. Siemens has released a new version for SINEC NMS and recommends to update to the latest version.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-24032US | — | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC). The affected application contains an authentication weakness due to insufficient validation of… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-801704: Authentication Bypass Vulnerability in SINEC NMS - CSAF Versionself
- SSA-801704: Authentication Bypass Vulnerability in SINEC NMS - HTML Versionself
- ICS Advisory ICSA-26-111-03 JSONself
- ICS Advisory ICSA-26-111-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (1)
- FixedSINEC NMS
Update to V4.0 SP3 or later version
https://support.industry.siemens.com/cs/ww/en/view/110000760/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan