CVE-2025-40755
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP1). Affected applications are vulnerable to SQL injection through getTotalAndFilterCounts endpoint. An authenticated low privileged attacker could exploit to insert data and achieve privilege escalation. (ZDI-CAN-26570)
Vendor
Product
CWE
Yayın Tarihi
2025-10-14 10:15:37
Güncelleme
2025-10-21 14:40:48
Source Identifier
productcert@siemens.com
KEV Date Added
-