Product by Siemens

    Siemens SINEC NMS

    9 known vulnerabilities in Siemens SINEC NMS (Siemens), 1 of them actively exploited (CISA KEV).

    Key figures

    9

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Siemens SINEC NMS (Siemens)
    CriticalCVE-2022-22965

    Spring Framework JDK 9+ Remote Code Execution Vulnerability

    In CISA KEValso in 35 other products

    		9.8
    HighCVE-2020-25237

    Siemens SINEC NMS: Path Traversal

    also in 2 other products

    		8.1
    HighCVE-2021-37200

    Siemens SINEC NMS: Path Traversal

    also in 1 other product

    		7.7
    HighCVE-2022-24281

    Siemens SINEC NMS: SQL Injection

    also in 2 other products

    		7.2
    HighCVE-2021-33721

    Siemens SINEC NMS: OS Command Injection

    also in 1 other product

    		7.2
    HighCVE-2022-24282

    Siemens SINEC NMS: Deserialization of Untrusted Data

    also in 2 other products

    		7.2
    HighCVE-2021-37201

    Siemens SINEC NMS: Cross-Site Request Forgery (CSRF)

    also in 1 other product

    		8.8
    HighCVE-2022-25311

    Siemens SINEC NMS: Improper Privilege Management

    also in 3 other products

    		7.3
    MediumCVE-2020-7580

    Siemens SIMATIC Automation Tool: Unquoted Search Path or Element

    also in 28 other products

    		6.7

    News

    All products by Siemens