← CVE Intelligence

CVE-2025-40755

Siemens / SINEC NMS PUBLISHED

Description (CNA)

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP1). Affected applications are vulnerable to SQL injection through getTotalAndFilterCounts endpoint. An authenticated low privileged attacker could exploit to insert data and achieve privilege escalation. (ZDI-CAN-26570)

Affected (CNA)

Vendor / productVersions
Siemens / SINEC NMSaffected 0 before V4.0 SP1

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.