OS Command Injection Vulnerability in SINEC NMS

An authenticated attacker with high-level credentials could run arbitrary commands on the SINEC NMS server with full system privileges, allowing them to modify network monitoring configurations, disable alerts, or disrupt network visibility across your SCADA/ICS infrastructure.

Water and electric utilities running SINEC NMS for SCADA/ICS network monitoring and management. This affects operations managers and IT staff who rely on the NMS for visibility into programmable logic controllers (PLCs), remote terminal units (RTUs), and other networked control devices.

An attacker with valid engineering or administrative credentials connects to the SINEC NMS server over the network and provides specially crafted input to a command processing function. The application fails to sanitize this input and executes it as an OS command, giving the attacker the same privileges as the NMS service.