Advisories · Technology

Siemens SINEC NMS.

Every CVE that names Siemens SINEC NMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-25654 CVE record

CVSS 8.7 High

Insecure direct object reference in Siemens SINEC NMS
- Siemens SINEC NMS
- Broken access control
Not analysed yet 14 Apr 2026
CVE-2026-24032 CVE record

CVSS 6.9 Medium

Improper signature verification in Siemens SINEC NMS
- Siemens SINEC NMS
- Weak cryptography or TLS
Not analysed yet 14 Apr 2026
CVE-2026-25656 CVE record

CVSS 8.5 High

Uncontrolled search path in Siemens SINEC NMS and others
- Siemens SINEC NMS
- Siemens User Management Component (UMC)
- CWE-427
Not analysed yet 10 Feb 2026
CVE-2026-25655 CVE record

CVSS 8.5 High

Uncontrolled search path in Siemens SINEC NMS
- Siemens SINEC NMS
- CWE-427
Not analysed yet 10 Feb 2026
CVE-2025-40755 CVE record

CVSS 8.7 High

SQL injection in Siemens SINEC NMS
- Siemens SINEC NMS
- SQL injection
Not analysed yet 14 Oct 2025
CVE-2025-40738 CVE record

CVSS 8.7 HighCritical · CVSS 7+ and EPSS

Path traversal in Siemens SINEC NMS
- Siemens SINEC NMS
- Path traversal
Not analysed yet 8 Jul 2025
CVE-2025-40737 CVE record

CVSS 8.7 HighCritical · CVSS 7+ and EPSS

Path traversal in Siemens SINEC NMS
- Siemens SINEC NMS
- Path traversal
Not analysed yet 8 Jul 2025
CVE-2025-40736 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Missing authentication in Siemens SINEC NMS
- Siemens SINEC NMS
- Authentication bypass
Not analysed yet 8 Jul 2025
CVE-2025-40735 CVE record

CVSS 8.7 High

SQL injection in Siemens SINEC NMS
- Siemens SINEC NMS
- SQL injection
Not analysed yet 8 Jul 2025
CVE-2025-30176 CVE record

CVSS 8.7 High

Out-of-bounds read in Siemens SIMATIC PCS neo V4.1 and others
- Siemens SIMATIC PCS neo V4.1
- Siemens SIMATIC PCS neo V5.0
- Memory corruption
Not analysed yet 13 May 2025
CVE-2025-30175 CVE record

CVSS 8.7 High

Out-of-bounds write in Siemens SIMATIC PCS neo V4.1 and others
- Siemens SIMATIC PCS neo V4.1
- Siemens SIMATIC PCS neo V5.0
- Memory corruption
Not analysed yet 13 May 2025
CVE-2025-30174 CVE record

CVSS 8.7 High

Out-of-bounds read in Siemens SIMATIC PCS neo V4.1 and others
- Siemens SIMATIC PCS neo V4.1
- Siemens SIMATIC PCS neo V5.0
- Memory corruption
Not analysed yet 13 May 2025
CVE-2024-49775 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Heap-based buffer overflow in Siemens Opcenter Execution Foundation and others
- Siemens Opcenter Execution Foundation
- Siemens Opcenter Intelligence
- Memory corruption
Not analysed yet 16 Dec 2024
CVE-2024-47808 CVE record

CVSS 8.3 High

Incorrect permission assignment in Siemens SINEC NMS
- Siemens SINEC NMS
- Broken access control
Not analysed yet 12 Nov 2024
CVE-2024-33698 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Heap-based buffer overflow in Siemens Opcenter Quality and others
- Siemens Opcenter Quality
- Siemens Opcenter RDnL
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-41941 CVE record

CVSS 5.3 Medium

Incorrect authorization in Siemens SINEC NMS
- Siemens SINEC NMS
- Broken access control
Not analysed yet 13 Aug 2024
CVE-2024-41940 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Improper input validation in Siemens SINEC NMS
- Siemens SINEC NMS
- CWE-20
Not analysed yet 13 Aug 2024
CVE-2024-41939 CVE record

CVSS 8.7 High

Incorrect authorization in Siemens SINEC NMS
- Siemens SINEC NMS
- Broken access control
Not analysed yet 13 Aug 2024
CVE-2024-41938 CVE record

CVSS 5.1 Medium

Path traversal in Siemens SINEC NMS
- Siemens SINEC NMS
- Path traversal
Not analysed yet 13 Aug 2024
CVE-2024-36398 CVE record

CVSS 8.5 High

Execution with unnecessary privileges in Siemens SINEC NMS
- Siemens SINEC NMS
- Privilege escalation
Not analysed yet 13 Aug 2024
CVE-2024-31978 CVE record

CVSS 7.6 High

Path traversal in Siemens SINEC NMS
- Siemens SINEC NMS
- Path traversal
Not analysed yet 9 Apr 2024
CVE-2024-23812 CVE record

CVSS 8.0 High

OS command injection in Siemens SINEC NMS
- Siemens SINEC NMS
- Command injection
Not analysed yet 13 Feb 2024
CVE-2024-23811 CVE record

CVSS 8.8 High

Unrestricted file upload in Siemens SINEC NMS
- Siemens SINEC NMS
- Unrestricted file upload
Not analysed yet 13 Feb 2024
CVE-2024-23810 CVE record

CVSS 8.8 High

SQL injection in Siemens SINEC NMS
- Siemens SINEC NMS
- SQL injection
Not analysed yet 13 Feb 2024
CVE-2023-46285 CVE record

CVSS 7.5 High

Improper input validation in Siemens Opcenter Execution Foundation and others
- Siemens Opcenter Execution Foundation
- Siemens Opcenter Quality
- CWE-20
Not analysed yet 12 Dec 2023
CVE-2023-46284 CVE record

CVSS 7.5 High

Buffer overflow in Siemens Opcenter Execution Foundation and others
- Siemens Opcenter Execution Foundation
- Siemens Opcenter Quality
- Memory corruption
Not analysed yet 12 Dec 2023
CVE-2023-46283 CVE record

CVSS 7.5 High

Buffer overflow in Siemens Opcenter Execution Foundation and others
- Siemens Opcenter Execution Foundation
- Siemens Opcenter Quality
- Memory corruption
Not analysed yet 12 Dec 2023
CVE-2023-46282 CVE record

CVSS 7.1 High

Cross-site scripting in Siemens Opcenter Execution Foundation and others
- Siemens Opcenter Execution Foundation
- Siemens Opcenter Quality
- Cross-site scripting (XSS)
Not analysed yet 12 Dec 2023
CVE-2023-46281 CVE record

CVSS 7.1 High

Siemens Opcenter Execution Foundation: A vulnerability has been identified in Opcenter Execution Foundation (All versions <…
- Siemens Opcenter Execution Foundation
- Siemens Opcenter Quality
- CWE-942
Not analysed yet 12 Dec 2023
CVE-2023-44315 CVE record

CVSS 4.7 Medium

Cross-site scripting in Siemens SINEC NMS
- Siemens SINEC NMS
- Cross-site scripting (XSS)
Not analysed yet 10 Oct 2023
CVE-2022-30527 CVE record

CVSS 7.8 High

Incorrect permission assignment in Siemens SINEC NMS
- Siemens SINEC NMS
- Broken access control
Not analysed yet 10 Oct 2023
CVE-2022-25311 CVE record

CVSS 7.3 High

Improper privilege management in Siemens SINEC NMS and others
- Siemens SINEC NMS
- Siemens SINEMA Server V14
- Privilege escalation
Not analysed yet 8 Mar 2022
CVE-2022-24282 CVE record

CVSS 7.2 High

Deserialization of untrusted data in Siemens SINEC NMS and others
- Siemens SINEC NMS
- Siemens SINEMA Server V14
- Insecure deserialization
Not analysed yet 8 Mar 2022
CVE-2022-24281 CVE record

CVSS 7.2 High

SQL injection in Siemens SINEC NMS and others
- Siemens SINEC NMS
- Siemens SINEMA Server V14
- SQL injection
Not analysed yet 8 Mar 2022
CVE-2021-33736 CVE record

SQL injection in Siemens SINEC NMS
- Siemens SINEC NMS
- SQL injection
Not analysed yet 12 Oct 2021
CVE-2021-33735 CVE record

SQL injection in Siemens SINEC NMS
- Siemens SINEC NMS
- SQL injection
Not analysed yet 12 Oct 2021
CVE-2021-33734 CVE record

SQL injection in Siemens SINEC NMS
- Siemens SINEC NMS
- SQL injection
Not analysed yet 12 Oct 2021
CVE-2021-33733 CVE record

SQL injection in Siemens SINEC NMS
- Siemens SINEC NMS
- SQL injection
Not analysed yet 12 Oct 2021
CVE-2021-33732 CVE record

SQL injection in Siemens SINEC NMS
- Siemens SINEC NMS
- SQL injection
Not analysed yet 12 Oct 2021
CVE-2021-33731 CVE record

SQL injection in Siemens SINEC NMS
- Siemens SINEC NMS
- SQL injection
Not analysed yet 12 Oct 2021
CVE-2021-33730 CVE record

SQL injection in Siemens SINEC NMS
- Siemens SINEC NMS
- SQL injection
Not analysed yet 12 Oct 2021
CVE-2021-33729 CVE record

SQL injection in Siemens SINEC NMS
- Siemens SINEC NMS
- SQL injection
Not analysed yet 12 Oct 2021
CVE-2021-33728 CVE record

Deserialization of untrusted data in Siemens SINEC NMS
- Siemens SINEC NMS
- Insecure deserialization
Not analysed yet 12 Oct 2021
CVE-2021-33727 CVE record

Information disclosure in Siemens SINEC NMS
- Siemens SINEC NMS
- Information disclosure
Not analysed yet 12 Oct 2021
CVE-2021-33726 CVE record

Path traversal in Siemens SINEC NMS
- Siemens SINEC NMS
- Path traversal
Not analysed yet 12 Oct 2021
CVE-2021-33725 CVE record

Path traversal in Siemens SINEC NMS
- Siemens SINEC NMS
- Path traversal
Not analysed yet 12 Oct 2021
CVE-2021-33724 CVE record

Path traversal in Siemens SINEC NMS
- Siemens SINEC NMS
- Path traversal
Not analysed yet 12 Oct 2021
CVE-2021-33723 CVE record

Improper authorization in Siemens SINEC NMS
- Siemens SINEC NMS
- Broken access control
Not analysed yet 12 Oct 2021
CVE-2021-33722 CVE record

Path traversal in Siemens SINEC NMS
- Siemens SINEC NMS
- Path traversal
Not analysed yet 12 Oct 2021
CVE-2021-37201 CVE record

Cross-site request forgery in Siemens SINEC NMS
- Siemens SINEC NMS
- Cross-site request forgery (CSRF)
Not analysed yet 14 Sept 2021
CVE-2021-37200 CVE record

Path traversal in Siemens SINEC NMS
- Siemens SINEC NMS
- Path traversal
Not analysed yet 14 Sept 2021
CVE-2021-33721 CVE record

OS command injection in Siemens SINEC NMS
- Siemens SINEC NMS
- Command injection
Not analysed yet 10 Aug 2021
CVE-2020-25237 CVE record

Path traversal in Siemens SINEC NMS and others
- Siemens SINEC NMS
- Siemens SINEMA Server
- Path traversal
Not analysed yet 9 Feb 2021
CVE-2019-6575 CVE record

CVSS 7.5 High

Siemens SIMATIC CP 443-1 OPC UA: A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions)…
- Siemens SIMATIC CP 443-1 OPC UA
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
- CWE-248
Not analysed yet 17 Apr 2019