Description
A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected devices are vulnerable to SQL injection. This could allow an unauthenticated remote attacker to execute arbitrary SQL queries on the server database.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SINEC NMS | < V4.0 | V4.0 |
Advisories 3
- NCSC-2025-0211 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Jul 8, 2025
- ICSA-25-191-01 Siemens SINEC NMS CISA ICS & IT advisories · Jul 8, 2025
- SSA-078892 SSA-078892: Multiple Vulnerabilities in SINEC NMS Before V4.0 Siemens ProductCERT · Jul 8, 2025