Skip to content
OpenAdvisories
Critical SSA-078892 4 CVEs

SSA-078892: Multiple Vulnerabilities in SINEC NMS Before V4.0

Published Jul 8, 2025 · Updated Jul 8, 2025

Vendor: Siemens Product: SINEC NMS

Summary

Siemens SINEC NMS before V4.0 is affected by multiple vulnerabilities which could allow an attacker to elevate privilege and exceute arbitrary code.

Siemens has released a new version for SINEC NMS and recommends to update to the latest version. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 4

  • Critical 9.8
    CVE-2025-40736

    A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application exposes an endpoint th…

    Siemens SINEC NMS ICS / OT
  • High 8.8
    CVE-2025-40735

    A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected devices are vulnerable to SQL inje…

    Siemens SINEC NMS ICS / OT
  • High 8.8
    CVE-2025-40737 EPSS 14%

    A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application does not properly vali…

    Siemens SINEC NMS ICS / OT
  • High 8.8
    CVE-2025-40738 EPSS 14%

    A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application does not properly vali…

    Siemens SINEC NMS ICS / OT

Revision history

  1. #1

    Publication Date

References