Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

42 records

Vendor: Siemens Component: Sinec Nms Clear all filters
TI-2026-20755 CVE-2026-25656 · GHSA-43rq-xvwq-hp7q

Uncontrolled search path in Siemens SINEC NMS

Priority LOW 38

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All versions < V2.15.2.1).

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00264 Published 2026-02-10 Fixed in V4.0 SP3, V2.15.2.1 CWE-427
TI-2026-20754 CVE-2026-25655 · GHSA-53c9-5r42-637x

Uncontrolled search path in Siemens SINEC NMS

Priority LOW 38

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP2).

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00264 Published 2026-02-10 Fixed in V4.0 SP2 CWE-427
TI-2025-27218 CVE-2025-40755 · GHSA-hmqp-377p-gpj8

SQL injection in Siemens SINEC NMS

Priority MEDIUM 40

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP1).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0038 Published 2025-10-14 Fixed in V4.0 SP1 CWE-89
TI-2025-27206 CVE-2025-40738 · GHSA-fq7w-h2xr-rr5c

Path traversal in Siemens SINEC NMS

Priority MEDIUM 54

A vulnerability has been identified in SINEC NMS (All versions < V4.0).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.13438 Published 2025-07-08 Fixed in V4.0 CWE-22
TI-2025-27205 CVE-2025-40737 · GHSA-fg27-6v6q-r3w4

Path traversal in Siemens SINEC NMS

Priority MEDIUM 54

A vulnerability has been identified in SINEC NMS (All versions < V4.0).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.13438 Published 2025-07-08 Fixed in V4.0 CWE-22
TI-2025-27204 CVE-2025-40736 · GHSA-5w39-m9v9-2j2j

Missing authentication in Siemens SINEC NMS

Priority MEDIUM 48

A vulnerability has been identified in SINEC NMS (All versions < V4.0).

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00456 Published 2025-07-08 Fixed in V4.0 CWE-306
TI-2025-27203 CVE-2025-40735 · GHSA-3g42-9rvj-6j9x

SQL injection in Siemens SINEC NMS

Priority MEDIUM 40

A vulnerability has been identified in SINEC NMS (All versions < V4.0).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00534 Published 2025-07-08 Fixed in V4.0 CWE-89
TI-2025-21515 CVE-2025-30176 · GHSA-rq2h-x4xh-35w4

Out-of-bounds read in Siemens SIMATIC PCS neo V4.1

Priority MEDIUM 45

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0065 Published 2025-05-13 Fixed in V4.0, V2.15.1.1 CWE-125
TI-2025-21514 CVE-2025-30175 · GHSA-p7rr-mpvr-c5pf

Out-of-bounds write in Siemens SIMATIC PCS neo V4.1

Priority MEDIUM 45

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0065 Published 2025-05-13 Fixed in V4.0, V2.15.1.1 CWE-787
TI-2025-21513 CVE-2025-30174 · GHSA-c22p-h6j4-33wp

Out-of-bounds read in Siemens SIMATIC PCS neo V4.1

Priority MEDIUM 45

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0065 Published 2025-05-13 Fixed in V4.0, V2.15.1.1 CWE-125
TI-2024-27963 CVE-2024-41941 · GHSA-96w9-8q2h-2vpm

Incorrect authorization in Siemens SINEC NMS

Priority LOW 24

A vulnerability has been identified in SINEC NMS (All versions < V3.0).

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0026 Published 2024-08-13 Fixed in V3.0 CWE-863
TI-2024-27962 CVE-2024-41940 · GHSA-m3qr-mjwp-7555

Improper input validation in Siemens SINEC NMS

Priority MEDIUM 43

A vulnerability has been identified in SINEC NMS (All versions < V3.0).

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.00554 Published 2024-08-13 Fixed in V3.0 CWE-20
TI-2024-27961 CVE-2024-41939 · GHSA-8g9j-h3c4-q352

Incorrect authorization in Siemens SINEC NMS

Priority MEDIUM 40

A vulnerability has been identified in SINEC NMS (All versions < V3.0).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0051 Published 2024-08-13 Fixed in V3.0 CWE-863
TI-2024-27960 CVE-2024-41938 · GHSA-jv74-c838-vcpf

Path traversal in Siemens SINEC NMS

Priority LOW 23

A vulnerability has been identified in SINEC NMS (All versions < V3.0).

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.0026 Published 2024-08-13 Fixed in V3.0 CWE-22
TI-2024-15806 CVE-2024-23812 · GHSA-mpc7-49rp-mqqc

OS command injection in Siemens SINEC NMS

Priority MEDIUM 42

A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01094 Published 2024-02-13 Fixed in V2.0 SP1 CWE-78
TI-2024-15805 CVE-2024-23811 · GHSA-vmw7-gx6r-25fh

Unrestricted file upload in Siemens SINEC NMS

Priority MEDIUM 40

A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1).

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00387 Published 2024-02-13 Fixed in V2.0 SP1 CWE-434
TI-2024-15804 CVE-2024-23810 · GHSA-qf5j-fwc8-wj57

SQL injection in Siemens SINEC NMS

Priority MEDIUM 44

A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00654 Published 2024-02-13 Fixed in V2.0 SP1 CWE-89
TI-2023-23833 CVE-2023-44315 · GHSA-cp45-gw5c-9989

Cross-site scripting in Siemens SINEC NMS

Priority LOW 24

A vulnerability has been identified in SINEC NMS (All versions < V2.0).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00343 Published 2023-10-10 Fixed in V2.0 CWE-79
TI-2021-18835 CVE-2021-42550 · GHSA-668q-qrv7-99fm

RCE from attacker with configuration edit priviledges through JNDI lookup

Priority LOW 37

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.0477 Published 2021-12-16 Partial fix · 1.2.9, 1.3.0-alpha11 CWE-502
TI-2021-13110 CVE-2021-33736 · GHSA-jhf6-fwx2-82qv

SQL injection in Siemens SINEC NMS

Priority LOW 34

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01182 Published 2021-10-12 No fix listed CWE-89
TI-2021-13109 CVE-2021-33735 · GHSA-23vf-vjgx-x757

SQL injection in Siemens SINEC NMS

Priority LOW 34

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0115 Published 2021-10-12 No fix listed CWE-89
Load more