Description
A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application exposes an endpoint that allows an unauthorized modification of administrative credentials. This could allow an unauthenticated attacker to reset the superadmin password and gain full control of the application (ZDI-CAN-26569).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SINEC NMS | < V4.0 | V4.0 |
Advisories 3
- NCSC-2025-0211 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Jul 8, 2025
- ICSA-25-191-01 Siemens SINEC NMS CISA ICS & IT advisories · Jul 8, 2025
- SSA-078892 SSA-078892: Multiple Vulnerabilities in SINEC NMS Before V4.0 Siemens ProductCERT · Jul 8, 2025