Summary
SINEC NMS before V4.0 SP3 contains an Authorization Bypass vulnerability that could allow an attacker to bypass authorization checks, leading to the ability to reset the password of any arbitrary user account.
Siemens has released a new version for SINEC NMS and recommends to update to the latest version.
Vulnerabilities 1
-
High 8.8
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3). Affected products do not properly validate …
Revision history
-
#2
Initial CISA Republication of Siemens ProductCERT SSA-605717 advisory
-
#1
Publication Date
References
-
SSA-605717: Authorization Bypass Vulnerability in SINEC NMS Before V4.0 SP3 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-605717.html
-
ICS Advisory ICSA-26-111-09 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-09
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b