High severity · published Jul 8, 2025
CVE-2025-40737
A vulnerability has been identified in SINEC NMS (All versions < V4.0)
8.8
CVSS
13.4%
EPSS
No
On KEV
Description
A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application does not properly validate file paths when extracting uploaded ZIP files. This could allow an attacker to write arbitrary files to restricted locations and potentially execute code with elevated privileges (ZDI-CAN-26571).
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)13.4% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SN
Sinec Nms · Siemens
before 4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-40737
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-40737
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-078892.html
More from Sinec Nms
9.0
CVE-2021-40438
mod_proxy SSRF
7.5
CVE-2023-44487
HTTP/2 Rapid Reset Attack Vulnerability
9.8
CVE-2025-40736
A vulnerability has been identified in SINEC NMS (All versions < V4.0)
9.8
CVE-2024-33698
A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1…
9.8
CVE-2024-23810
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1)