Critical severity · published Jul 8, 2025
CVE-2025-40736
A vulnerability has been identified in SINEC NMS (All versions < V4.0)
9.8
CVSS
0.5%
EPSS
No
On KEV
Description
A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application exposes an endpoint that allows an unauthorized modification of administrative credentials. This could allow an unauthenticated attacker to reset the superadmin password and gain full control of the application (ZDI-CAN-26569).
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SN
Sinec Nms · Siemens
before 4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-40736
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-40736
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-078892.html
More from Sinec Nms
9.0
CVE-2021-40438
mod_proxy SSRF
7.5
CVE-2023-44487
HTTP/2 Rapid Reset Attack Vulnerability
9.8
CVE-2024-33698
A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1…
9.8
CVE-2024-23810
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1)
9.8
CVE-2021-39275
ap_escape_quotes() may write beyond the end of a buffer when given malicious input