907 matches found
PT-2025-49840
A vulnerability has been identified in SINEC Security Monitor All versions V4.10.0. The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause denial of service condition of the report...
Siemens SINEC NMS getTotalAndFilterCounts SQL Injection Privilege Escalation Vulnerability
This vulnerability allows remote attackers to escalate privileges on affected installations of Siemens SINEC NMS. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the getTotalAndFilterCounts method. The issue results from the lack of...
Vulnerabilities fixed in Siemens products
Siemens has fixed vulnerabilities in several products such as SIMATIC, SINEC, SIPLUS and Solid Edge. The vulnerabilities potentially enable a malicious person to carry out attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Manipulation of data - Circumvention o...
CVE-2025-40755
A vulnerability has been identified in SINEC NMS All versions V4.0 SP1. Affected applications are vulnerable to SQL injection through getTotalAndFilterCounts endpoint. An authenticated low privileged attacker could exploit to insert data and achieve privilege escalation. ZDI-CAN-26570...
CVE-2025-40755
A vulnerability has been identified in SINEC NMS All versions V4.0 SP1. Affected applications are vulnerable to SQL injection through getTotalAndFilterCounts endpoint. An authenticated low privileged attacker could exploit to insert data and achieve privilege escalation. ZDI-CAN-26570...
EUVD-2025-34162
A vulnerability has been identified in SINEC NMS All versions V4.0 SP1. Affected applications are vulnerable to SQL injection through getTotalAndFilterCounts endpoint. An authenticated low privileged attacker could exploit to insert data and achieve privilege escalation. ZDI-CAN-26570...
CVE-2025-40755
A vulnerability has been identified in SINEC NMS All versions V4.0 SP1. Affected applications are vulnerable to SQL injection through getTotalAndFilterCounts endpoint. An authenticated low privileged attacker could exploit to insert data and achieve privilege escalation. ZDI-CAN-26570...
CVE-2025-40755
A vulnerability has been identified in SINEC NMS All versions V4.0 SP1. Affected applications are vulnerable to SQL injection through getTotalAndFilterCounts endpoint. An authenticated low privileged attacker could exploit to insert data and achieve privilege escalation. ZDI-CAN-26570...
CVE-2025-40755
CVE-2025-40755 affects Siemens SINEC NMS prior to v4.0 SP1. The getTotalAndFilterCounts endpoint is vulnerable to SQL injection, enabling an authenticated low-priv attacker to insert data and escalate privileges. A fix is available in v4.0 SP1 or later (per PT-2025-41881; Siemens ProductCERT advi...
PT-2025-41881
Name of the Vulnerable Software and Affected Versions SINEC NMS versions prior to 4.0 SP1 Description A SQL injection issue exists in SINEC NMS. The vulnerability is present in the getTotalAndFilterCounts API endpoint. An authenticated attacker with low privileges can exploit this to insert data,...
Siemens SINEC NMS SQL注入漏洞
Siemens SINEC NMS is a network management system NMS from Siemens, Germany, that can be used 24/7 to centrally monitor, manage, and configure industrial networks with tens of thousands of devices, including safety-related areas. A SQL injection vulnerability exists in Siemens SINEC NMS versions...
Siemens SINEC NMS
SUMMARY SINEC NMS is affected by SQL injection vulnerability that could allow an authenticated low privileged attacker to exploit by inserting malicious data and achieve privilege escalation. Siemens has released a new version for SINEC NMS and recommends to update to the latest version. 2...
EUVD-2021-20404
Malware in sbrugna...
EUVD-2020-17927
Malware in sbrugna...
EUVD-2021-20407
Malware in sbrugna...
EUVD-2021-20412
Malware in sbrugna...
EUVD-2021-20402
Malware in sbrugna...
EUVD-2021-20405
Malware in sbrugna...