Multiple Vulnerabilities in SINEC NMS Before V4.0
Act Now9.8SSA-078892Jul 8, 2025
Attack VectorNetwork
Auth RequiredNone
ComplexityLow
User InteractionNone needed
Summary
Siemens SINEC NMS before version 4.0 contains multiple critical vulnerabilities including SQL injection (CWE-89), missing authentication controls (CWE-306), and path traversal (CWE-22). These flaws allow an unauthenticated attacker with network access to escalate privileges to administrator level and execute arbitrary code on the network management server.
What this means
What could happen
An attacker could gain administrator-level control of SINEC NMS and run arbitrary code on the network management server, potentially compromising visibility and control of all connected Siemens industrial networks and devices.
Who's at risk
Network administrators and plant operators who rely on Siemens SINEC NMS for managing and monitoring industrial automation networks, including water treatment facilities, power distribution systems, and manufacturing plants using Siemens industrial control equipment.
How it could be exploited
An attacker with network access to the SINEC NMS server could exploit SQL injection (CWE-89) or missing authentication checks (CWE-306) to bypass access controls, escalate privileges to administrator, and execute arbitrary code on the management system. Path traversal (CWE-22) could allow unauthorized access to sensitive configuration files.
Prerequisites
- Network access to SINEC NMS server (typically ports 80/443 or management interface)
- No valid credentials required for exploitation of authentication bypass vulnerabilities
Remotely exploitable without credentialsLow complexity attackCritical CVSS score (9.8)Network management system - controls visibility of all connected devicesAffects multiple vulnerability classes (injection, authentication, path traversal)
Exploitability
Low exploit probability (EPSS 0.4%)
Affected products (1)
ProductAffected VersionsFix Status
SINEC NMS< V4.04.0
Remediation & Mitigation
0/1
Schedule — requires maintenance window
0/1Patching may require device reboot — plan for process interruption
HOTFIXUpdate SINEC NMS to version 4.0 or later
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/90321f2c-5375-4dd0-b228-3a3bf0d736c2