Siemens SINEC NMS Cross-Site Scripting Vulnerability

Siemens SINEC NMS is a network management system (NMS) from Siemens, Germany, that can be used 24/7 to centrally monitor, manage and configure industrial networks with tens of thousands of devices, including safety-related areas. The Siemens SINEC NMS is vulnerable to a cross-site scripting vulnerability due to an affected application incorrectly clearing certain SNMP configuration data retrieved from monitored devices. An attacker could exploit the vulnerability to cause a legitimate user to inadvertently modify application data.