Description
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SINEC NMS | All versions < V1.0 SP2 Update 1 | — |
Advisories 2
- ICSA-21-287-05 Siemens SINEC NMS CISA ICS & IT advisories · May 6, 2025
- SSA-163251 SSA-163251: Multiple Vulnerabilities in SINEC NMS Siemens ProductCERT · Oct 12, 2021