Siemens SINEC NMS
Siemens SINEC NMS before V4.0 is affected by multiple vulnerabilities which could allow an attacker to elevate privilege and exceute arbitrary code. Siemens has released a new version for SINEC NMS and recommends to update to the latest version. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-40738US | — | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application does not properly validate file paths when extracting uploaded ZIP files. This coul… | ||||
| CVE-2025-40737US | — | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application does not properly validate file paths when extracting uploaded ZIP files. This coul… | ||||
| CVE-2025-40736US | —OT erhöht | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application exposes an endpoint that allows an unauthorized modification of administrative cred… | ||||
| CVE-2025-40735US | — | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected devices are vulnerable to SQL injection. This could allow an unauthenticated remote attacker to… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-078892: Multiple Vulnerabilities in SINEC NMS Before V4.0 - CSAF Versionself
- SSA-078892: Multiple Vulnerabilities in SINEC NMS Before V4.0 - HTML Versionself
- ICS Advisory ICSA-25-191-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-191-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- BehobenSINEC NMS
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989514/ - BehobenSINEC NMS
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989514/ - BehobenSINEC NMS
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989514/ - BehobenSINEC NMS
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989514/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan