Description
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). The web interface of affected devices is vulnerable to a Cross-Site Request Forgery (CSRF) attack. This could allow an attacker to manipulate the SINEC NMS configuration by tricking an unsuspecting user with administrative privileges to click on a malicious link.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SINEC NMS | All versions < V1.0 SP1 | — |
Advisories 2
- ICSA-21-257-14 Siemens SINEC NMS CISA ICS & IT advisories · May 6, 2025
- SSA-330339 SSA-330339: Web Vulnerabilities in SINEC NMS Siemens ProductCERT · Sep 14, 2021