Summary
Multiple Siemens products are affected by two local privilege escalation vulnerabilities which could allow an low privileged attacker to load malicious DLLs, potentially leading to arbitrary code execution with elevated privileges.
Siemens has released new versions for the affected products and recommends to update to the latest versions.
Vulnerabilities 2
-
High 7.8
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP2). The affected application permits improper m…
-
High 7.8
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All versio…
Revision history
-
#2
Added fix version for SINEC NMS for CVE-2026-25656
-
#1
Publication Date
References
-
SSA-311973: Multiple Local Privilege Escalation Vulnerabilities in SINEC NMS and User Management Component (UMC) - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-311973.html