Siemens SINEC NMS
Advisory ansehen veröffentlicht 2025-10-14
SINEC NMS is affected by SQL injection vulnerability that could allow an authenticated low privileged attacker to exploit by inserting malicious data and achieve privilege escalation. Siemens has released a new version for SINEC NMS and recommends to update to the latest version.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-40755US | — | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP1). Affected applications are vulnerable to SQL injection through getTotalAndFilterCounts endpoint. An authe… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-318832: SQL Injection Vulnerability in SINEC NMS - CSAF Versionself
- SSA-318832: SQL Injection Vulnerability in SINEC NMS - HTML Versionself
- ICS Advisory ICSA-25-289-08 JSONself
- ICS Advisory ICSA-25-289-08 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (1)
- BehobenSINEC NMS
Update to V4.0 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109995116/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan