Vulnerabilities of Siemens SINEC NMS
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-25654 | A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3) | 8.8 High | Apr 14, 2026 |
| CVE-2026-24032 | A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC) | 7.3 High | Apr 14, 2026 |
| CVE-2026-25656 | A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All… | 7.8 High | Feb 10, 2026 |
| CVE-2026-25655 | A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP2) | 7.8 High | Feb 10, 2026 |
| CVE-2025-15467 | Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can… | Not rated | Jan 27, 2026 |
| CVE-2025-40755 | A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP1) | 8.8 High | Oct 14, 2025 |
| CVE-2025-30033 | The affected setup component is vulnerable to DLL hijacking | 7.8 High | Aug 12, 2025 |
| CVE-2025-40738 | A vulnerability has been identified in SINEC NMS (All versions < V4.0) | 8.8 High | Jul 8, 2025 |
| CVE-2025-40737 | A vulnerability has been identified in SINEC NMS (All versions < V4.0) | 8.8 High | Jul 8, 2025 |
| CVE-2025-40736 | A vulnerability has been identified in SINEC NMS (All versions < V4.0) | 9.8 Critical | Jul 8, 2025 |
| CVE-2025-40735 | A vulnerability has been identified in SINEC NMS (All versions < V4.0) | 8.8 High | Jul 8, 2025 |
| CVE-2025-30176 | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC… | 7.5 High | May 13, 2025 |
| CVE-2025-30175 | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC… | 7.5 High | May 13, 2025 |
| CVE-2025-30174 | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC… | 7.5 High | May 13, 2025 |
| CVE-2024-49775 | A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter… | 9.8 Critical | Dec 16, 2024 |
| CVE-2024-47808 | A vulnerability has been identified in SINEC NMS (All versions < V3.0 SP1) | 8.4 High | Nov 12, 2024 |
| CVE-2024-33698 | A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410),… | 9.8 Critical | Sep 10, 2024 |
| CVE-2024-41941 | A vulnerability has been identified in SINEC NMS (All versions < V3.0) | 4.3 Medium | Aug 13, 2024 |
| CVE-2024-41940 | A vulnerability has been identified in SINEC NMS (All versions < V3.0) | 9.1 Critical | Aug 13, 2024 |
| CVE-2024-41939 | A vulnerability has been identified in SINEC NMS (All versions < V3.0) | 8.8 High | Aug 13, 2024 |
| CVE-2024-41938 | A vulnerability has been identified in SINEC NMS (All versions < V3.0) | 5.5 Medium | Aug 13, 2024 |
| CVE-2024-36398 | A vulnerability has been identified in SINEC NMS (All versions < V3.0) | 7.8 High | Aug 13, 2024 |
| CVE-2023-46280 | A vulnerability has been identified in Security Configuration Tool (SCT) (All versions), SIMATIC Automation Tool (All… | 6.5 Medium | May 14, 2024 |
| CVE-2023-6237 | Issue summary: Checking excessively long invalid RSA public keys may take a long time | Not rated | Apr 25, 2024 |
| CVE-2024-31978 | A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP2) | 7.6 High | Apr 9, 2024 |
Other Siemens products
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 1132
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 1132
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 952
RUGGEDCOM RST2428P 326
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 247
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 221
SIMATIC CN 4100 187
JT2Go 153
RUGGEDCOM APE1808 99
Teamcenter Visualization 95
RUGGEDCOM ROX RX1536 91