Siemens SINEC NMS
56 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-25654 | < V4.0 SP3 | A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3). Affected products do not properly validate user authorization wh | HIGH 8.7 | 0.5 % | ||
| CVE-2026-24032 | < V4.0 SP3 | A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC). The affected application contains an authentication wea | MEDIUM 6.9 | 0.3 % | ||
| CVE-2026-25656 | < V4.0 SP3 | A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All versions < V2.15.2.1). The | HIGH 8.5 | 0.3 % | ||
| CVE-2026-25655 | < V4.0 SP2 | A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP2). The affected application permits improper modification of a conf | HIGH 8.5 | 0.3 % | ||
| CVE-2025-40755 | < V4.0 SP1 | A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP1). Affected applications are vulnerable to SQL injection through ge | HIGH 8.7 | 0.4 % | ||
| CVE-2025-40738 | < V4.0 | A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application does not properly validate file paths when | HIGH 8.7 | 13 % | ||
| CVE-2025-40737 | < V4.0 | A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application does not properly validate file paths when | HIGH 8.7 | 13 % | ||
| CVE-2025-40736 | < V4.0 | A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application exposes an endpoint that allows an unauthor | CRITICAL 9.3 | 0.5 % | ||
| CVE-2025-40735 | < V4.0 | A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected devices are vulnerable to SQL injection. This could all | HIGH 8.7 | 0.5 % | ||
| CVE-2025-30176 | < V4.0 | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V | HIGH 8.7 | 0.7 % | ||
| CVE-2025-30175 | < V4.0 | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V | HIGH 8.7 | 0.7 % | ||
| CVE-2025-30174 | < V4.0 | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V | HIGH 8.7 | 0.7 % | ||
| CVE-2024-49775 | | A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter Intelligence (All versions < V250 | CRITICAL 9.3 | 1.5 % | ||
| CVE-2024-47808 | < V3.0 SP1 | A vulnerability has been identified in SINEC NMS (All versions < V3.0 SP1). The affected application contains a database function, that does | HIGH 8.3 | 0.1 % | ||
| CVE-2024-33698 | | A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 ( | CRITICAL 9.3 | 1.1 % | ||
| CVE-2024-41941 | < V3.0 | A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly enforce authorization che | MEDIUM 5.3 | 0.3 % | ||
| CVE-2024-41940 | < V3.0 | A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly validate user input to a | CRITICAL 9.4 | 0.6 % | ||
| CVE-2024-41939 | < V3.0 | A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly enforce authorization che | HIGH 8.7 | 0.5 % | ||
| CVE-2024-41938 | < V3.0 | A vulnerability has been identified in SINEC NMS (All versions < V3.0). The importCertificate function of the SINEC NMS Control web applicat | MEDIUM 5.1 | 0.3 % | ||
| CVE-2024-36398 | < V3.0 | A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application executes a subset of its services as `NT AU | HIGH 8.5 | 0.2 % | ||
| CVE-2023-46280 | | A vulnerability has been identified in Security Configuration Tool (SCT) (All versions), SIMATIC Automation Tool (All versions < V5.0 SP2), | HIGH 8.2 | 0.3 % | ||
| CVE-2024-31978 | < V2.0 SP2 | A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP2). Affected devices allow authenticated users to export monitoring | HIGH 7.6 | 0.5 % | ||
| CVE-2024-23812 | < V2.0 SP1 | A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application incorrectly neutralizes special element | HIGH 8.8 | 1.1 % | ||
| CVE-2024-23811 | < V2.0 SP1 | A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application allows users to upload arbitrary files | HIGH 8.8 | 0.4 % | ||
| CVE-2024-23810 | < V2.0 SP1 | A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application is vulnerable to SQL injection. This co | CRITICAL 9.8 | 0.7 % | ||
| CVE-2023-46285 | < V2.0 SP1 | A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATI | HIGH 7.5 | 0.9 % | ||
| CVE-2023-46284 | < V2.0 SP1 | A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATI | HIGH 7.5 | 0.9 % | ||
| CVE-2023-46283 | < V2.0 SP1 | A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATI | HIGH 7.5 | 0.9 % | ||
| CVE-2023-46282 | < V2.0 SP1 | A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATI | HIGH 7.1 | 0.5 % | ||
| CVE-2023-46281 | < V2.0 SP1 | A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATI | HIGH 8.8 | 0.9 % | ||
| CVE-2023-44315 | < V2.0 | A vulnerability has been identified in SINEC NMS (All versions < V2.0). The affected application improperly sanitizes certain SNMP configura | MEDIUM 5.4 | 0.3 % | ||
| CVE-2022-30527 | < V2.0 | A vulnerability has been identified in SINEC NMS (All versions < V2.0). The affected application assigns improper access rights to specific | HIGH 7.8 | 0.2 % | ||
| CVE-2022-25311 | All versions >= V1.0.3 < V2.0 | A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All | HIGH 8.8 | 0.5 % | ||
| CVE-2022-24282 | All versions >= V1.0.3 < V2.0 | A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All | HIGH 7.2 | 1.4 % | ||
| CVE-2022-24281 | All versions < V1.0.3 | A vulnerability has been identified in SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). A privileged authenticated attac | HIGH 7.2 | 3.5 % | ||
| CVE-2021-33736 | All versions < V1.0 SP2 Update 1 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbit | HIGH 7.2 | 1.2 % | ||
| CVE-2021-33735 | All versions < V1.0 SP2 Update 1 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbit | HIGH 7.2 | 1.1 % | ||
| CVE-2021-33734 | All versions < V1.0 SP2 Update 1 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbit | HIGH 7.2 | 28 % | ||
| CVE-2021-33733 | All versions < V1.0 SP2 Update 1 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbit | HIGH 7.2 | 15 % | ||
| CVE-2021-33732 | All versions < V1.0 SP2 Update 1 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbit | HIGH 7.2 | 28 % | ||
| CVE-2021-33731 | All versions < V1.0 SP2 Update 1 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbit | HIGH 7.2 | 47 % | ||
| CVE-2021-33730 | All versions < V1.0 SP2 Update 1 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbit | HIGH 7.2 | 28 % | ||
| CVE-2021-33729 | All versions < V1.0 SP2 Update 1 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker that is able to import firmwa | HIGH 8.8 | 2.4 % | ||
| CVE-2021-33728 | All versions < V1.0 SP2 Update 1 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to upload JSON objects that | HIGH 7.2 | 1.6 % | ||
| CVE-2021-33727 | All versions < V1.0 SP2 Update 1 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker could download the user profi | MEDIUM 6.5 | 0.9 % | ||
| CVE-2021-33726 | All versions < V1.0 SP2 Update 1 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to download arbitrary files | HIGH 7.5 | 1.2 % | ||
| CVE-2021-33725 | All versions < V1.0 SP2 Update 1 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to delete arbitrary files or | CRITICAL 9.1 | 1.0 % | ||
| CVE-2021-33724 | All versions < V1.0 SP2 Update 1 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system contains an Arbitrary File Deletion | CRITICAL 9.1 | 1.0 % | ||
| CVE-2021-33723 | All versions < V1.0 SP2 Update 1 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker could change the user profile | MEDIUM 6.5 | 0.6 % | ||
| CVE-2021-33722 | All versions < V1.0 SP2 Update 1 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system has a Path Traversal vulnerability | MEDIUM 4.9 | 0.9 % | ||
| CVE-2021-37201 | All versions < V1.0 SP1 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). The web interface of affected devices is vulnerable to a Cross-S | HIGH 8.8 | 0.4 % | ||
| CVE-2021-37200 | All versions < V1.0 SP1 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). An attacker with access to the webserver of an affected system c | HIGH 7.7 | 37 % | ||
| CVE-2021-33721 | All versions < V1.0 SP2 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2). The affected application incorrectly neutralizes special element | HIGH 7.2 | 2.7 % | ||
| CVE-2020-25237 | All versions < V1.0 SP1 Update 1 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1 Update 1), SINEMA Server (All versions < V14.0 SP2 Update 2). When | HIGH 8.1 | 21 % | ||
| CVE-2020-7580 | | A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 | MEDIUM 6.7 | 0.5 % | ||
| CVE-2019-6575 | | A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS | HIGH 7.5 | 1.7 % |