CVE-2025-40736

A vulnerability has been identified in SINEC NMS All versions V4.0. The affected application exposes an endpoint that allows an unauthorized modification of administrative credentials. This could allow an unauthenticated attacker to reset the superadmin password and gain full control of the...

CVE-2025-40736

A vulnerability has been identified in SINEC NMS All versions V4.0. The affected application exposes an endpoint that allows an unauthorized modification of administrative credentials. This could allow an unauthenticated attacker to reset the superadmin password and gain full control of the...

CVE-2025-40736

CVE-2025-40736 affects Siemens SINEC NMS (all versions before 4.0). The issue is an access control/endpoint weakness that allows an unauthenticated attacker to modify administrative credentials, enabling a reset of the superadmin password and potentially full control of the application (ZDI-CAN-2...