Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-40755

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP1). Affected applications are vulnerable to SQL injection through getTotalAndFilterCounts endpoint. An authenticated low privileged attacker could exploit to insert data and achieve privilege escalation. (ZDI-CAN-26570)

Published

2025-10-14T10:15:37.817

Last Modified

2025-10-21T14:40:48.760

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-89
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application siemens sinec_nms < 4.0 Yes
Application siemens sinec_nms 4.0 Yes
References