Known vulnerabilities in SINEC NMS

Vendor: Siemens
Software: SINEC NMS
Software CPE: cpe:2.3:a:siemens:sinec_nms:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 51
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SINEC NMS SINEC NMS is affected by 51 known vulnerabilities: 8 high, 23 medium, 20 low Critical High Medium Low

Vulnerabilities (51)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU127506 - Improper Verification of Cryptographic Signature
CVE-2026-24032		 CWE-347 Medium
No
No
 4.0 SP3 24.04.2026 SB2026042480
#VU127498 - Authorization Bypass Through User-Controlled Key
CVE-2026-25654		 CWE-639 Medium
No
No
 4.0 SP3 24.04.2026 SB2026042480
#VU117621 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-40755		 CWE-89 Medium
No
No
 4.0 SP1 23.10.2025 SB20251023102
#VU116404 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-40738		 CWE-22 Medium
No
No
 4.0 02.10.2025 SB2025100233
#VU116403 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-40737		 CWE-22 Medium
No
No
 4.0 02.10.2025 SB2025100233
#VU116402 - Missing Authentication for Critical Function
CVE-2025-40736		 CWE-306 High
No
No
 4.0 02.10.2025 SB2025100233
#VU116401 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-40735		 CWE-89 Medium
No
No
 4.0 02.10.2025 SB2025100233
#VU109419 - Out-of-bounds read
CVE-2025-30176		 CWE-125 High
No
No
 2.15.1.1 19.05.2025 SB2025051943
#VU109418 - Out-of-bounds write
CVE-2025-30175		 CWE-787 High
No
No
 2.15.1.1 19.05.2025 SB2025051943
#VU109417 - Out-of-bounds read
CVE-2025-30174		 CWE-125 High
No
No
 2.15.1.1 19.05.2025 SB2025051943
#VU102502 - Heap-based Buffer Overflow
CVE-2024-49775		 CWE-122 High
No
No
 3.0 SP2 09.01.2025 SB2025010960
#VU97161 - Heap-based Buffer Overflow
CVE-2024-33698		 CWE-122 High
No
No
 - 11.09.2024 SB2024091139
#VU88520 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-31978		 CWE-22 Medium
No
No
 2.0 SP2 15.04.2024 SB2024041509
#VU82894 - Resource Management Errors
CVE-2023-5678		 CWE-399 Medium
No
No
 2.0 SP2 07.11.2023 SB20231107122
SB2023112047
SB2023112048
and 147 more
#VU81909 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-30527		 CWE-79 Low
No
No
 2.0 11.10.2023 SB2023101163
#VU81908 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-44315		 CWE-79 Low
No
No
 2.0 11.10.2023 SB2023101163
#VU68747 - Stack-based buffer overflow
CVE-2022-35260		 CWE-121 Low
No
No
 1.0.3.1 26.10.2022 SB2022102624
SB2022102662
SB2022102705
and 17 more
#VU68746 - Expected Behavior Violation
CVE-2022-32221		 CWE-440 Medium
No
No
 1.0.3.1 26.10.2022 SB2022102624
SB2022102643
SB2022102644
and 58 more
#VU67532 - Use After Free
CVE-2022-40674		 CWE-416 High
No
No
 1.0.3.1 21.09.2022 SB2022092118
SB2022092119
SB2022092317
and 111 more
#VU66881 - Improper input validation
CVE-2022-35252		 CWE-20 Medium
No
No
 1.0.3.1 31.08.2022 SB2022083106
SB2022090108
SB2022090217
and 55 more


Showing elements 1 - 20 out of 51