Description
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC). The affected application contains an authentication weakness due to insufficient validation of user identity in the UMC component.
This could allow an unauthenticated remote attacker to bypass authentication and gain unauthorized access to the application. (ZDI-CAN-27564)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SINEC NMS | < V4.0 SP3 | V4.0 SP3 |
Advisories 3
- ICSA-26-111-03 Siemens SINEC NMS CISA ICS & IT advisories · Apr 21, 2026
- NCSC-2026-0112 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Apr 14, 2026
- SSA-801704 SSA-801704: Authentication Bypass Vulnerability in SINEC NMS Siemens ProductCERT · Apr 14, 2026