CVE-2025-40755 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP1). Affected applications are vulnerable to SQL injection through getTotalAndFilterCount…
High CVSS: 8.7

CVE-2025-40755

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP1). Affected applications are vulnerable to SQL injection through getTotalAndFilterCounts endpoint. An authenticated low privileged attacker could exploit to insert data and achieve privilege escalation. (ZDI-CAN-26570)
Vendor
Siemens
Product
Sinec Nms
CWE
CWE-89
Yayın Tarihi
2025-10-14 10:15:37
Güncelleme
2025-10-21 14:40:48
Source Identifier
productcert@siemens.com
KEV Date Added
-

Kategoriler

Referanslar