7.8
Élevée
CVE-2026-25656 A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All…
Description
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All versions < V2.15.2.1). The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially leading to arbitrary code execution with SYSTEM privileges.(ZDI-CAN-28108)
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SINEC NMS | Versions non publiées | |
| User Management Component (UMC) 2.15 | premières → < 2.15.2.1 | 2.15.2.1 |
Références
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de SINEC NMS
Les 79 CVE de SINEC NMS →
CVE-2026-25654
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3)
8.8
Élevée
CVE-2026-24032
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC)
7.3
Élevée
CVE-2026-25655
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP2)
7.8
Élevée
CVE-2025-15467
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can…
Non notée