Siemens SINEC NMS Missing Authentication Vulnerability Allowing Unauthorized Password Resets

A vulnerability exists in Siemens SINEC NMS versions prior to 4.0, allowing unauthorized modification of administrative credentials. This issue enables an unauthenticated attacker to reset the superadmin password, potentially gaining full control of the application.

Impact

Exploitation of this vulnerability could lead to unauthorized access and control over the SINEC NMS application, allowing an attacker to perform administrative functions.

Remediation

Users are advised to update to SINEC NMS version 4.0 or later. For more information, visit the Siemens Industry Support page.