Web Vulnerabilities in SINEC NMS

An attacker could trick an administrator into clicking a malicious link that changes SINEC NMS configuration settings, potentially altering network management policies or access controls for critical infrastructure monitoring and reporting.

Network management operators and system administrators who use SINEC NMS to monitor and manage industrial networks, including those in utilities and manufacturing plants that rely on Siemens network management infrastructure.

An attacker crafts a malicious link (CSRF attack) and sends it to a SINEC NMS administrator. When the administrator clicks the link while logged in to SINEC NMS, the attacker's request executes in the admin's browser session without additional authentication, allowing unauthorized modification of NMS configuration.