Siemens Sinec Nms vulnerabilities

50 CVEs affecting Siemens Sinec Nms, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-25654, published 2026-04-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-40438: Apache HTTP Server-Side Request Forgery (SSRF), published 2021-09-16. Critical severity, CVSS 9.0. Actively exploited: in CISA KEV since 2021-12-01. EPSS: 100% chance of exploitation in the next 30 days. A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.
CVE-2023-44487: HTTP/2 Rapid Reset Attack Vulnerability, published 2023-10-10. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2023-10-10. EPSS: 100% chance of exploitation in the next 30 days. The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-34798, published 2021-09-16. High severity, CVSS 7.5. EPSS: 64.5% chance of exploitation in the next 30 days. Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.
CVE-2021-3449, published 2021-03-25. Medium severity, CVSS 5.9. EPSS: 63.5% chance of exploitation in the next 30 days. An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where…
CVE-2021-33731, published 2021-10-12. High severity, CVSS 7.2. EPSS: 46.6% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted…
CVE-2021-39275, published 2021-09-16. Critical severity, CVSS 9.8. EPSS: 39.4% chance of exploitation in the next 30 days. ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue…
CVE-2021-33734, published 2021-10-12. High severity, CVSS 7.2. EPSS: 27.7% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted…
CVE-2021-33732, published 2021-10-12. High severity, CVSS 7.2. EPSS: 27.7% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted…
CVE-2021-33730, published 2021-10-12. High severity, CVSS 7.2. EPSS: 27.7% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted…
CVE-2021-33733, published 2021-10-12. High severity, CVSS 7.2. EPSS: 15.4% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted…

Latest

CVE-2026-25654, published 2026-04-14. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3). Affected products do not properly validate user authorization when processing password reset requests. This could allow an…
CVE-2026-24032, published 2026-04-14. High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC). The affected application contains an authentication weakness due to insufficient validation of user identity in…
CVE-2026-25656, published 2026-02-10. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All versions < V2.15.2.1). The affected application permits improper modification of a…
CVE-2026-25655, published 2026-02-10. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP2). The affected application permits improper modification of a configuration file by a low-privileged user. This could allow…
CVE-2025-40755, published 2025-10-14. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP1). Affected applications are vulnerable to SQL injection through getTotalAndFilterCounts endpoint. An authenticated low…
CVE-2025-30033, published 2025-08-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup…
CVE-2025-40738, published 2025-07-08. High severity, CVSS 8.8. EPSS: 13.4% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application does not properly validate file paths when extracting uploaded ZIP files. This could allow an attacker…
CVE-2025-40737, published 2025-07-08. High severity, CVSS 8.8. EPSS: 13.4% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application does not properly validate file paths when extracting uploaded ZIP files. This could allow an attacker…
CVE-2025-40736, published 2025-07-08. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application exposes an endpoint that allows an unauthorized modification of administrative credentials. This could…
CVE-2025-40735, published 2025-07-08. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected devices are vulnerable to SQL injection. This could allow an unauthenticated remote attacker to execute arbitrary…