CVE-2025-40736 — Siemens / SINEC NMS

CVE-2025-40736

Siemens / SINEC NMS PUBLISHED

Description (CNA)

A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application exposes an endpoint that allows an unauthorized modification of administrative credentials. This could allow an unauthenticated attacker to reset the superadmin password and gain full control of the application (ZDI-CAN-26569).

Affected (CNA)

Vendor / product	Versions
Siemens / SINEC NMS	affected 0 before V4.0

CWE

CWE-306

References

https://cert-portal.siemens.com/productcert/html/ssa-078892.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.