CVE-2026-25656 — Siemens / SINEC NMS

CVE-2026-25656

Siemens / SINEC NMS PUBLISHED

Description (CNA)

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All versions < V2.15.2.1). The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially leading to arbitrary code execution with SYSTEM privileges.(ZDI-CAN-28108)

Affected (CNA)

Vendor / product	Versions
Siemens / SINEC NMS	affected 0 before V4.0 SP3
Siemens / User Management Component (UMC)	affected 0 before V2.15.2.1

CWE

CWE-427

References

https://cert-portal.siemens.com/productcert/html/ssa-311973.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.