SINEC NMS vulnerabilities | LiveThreat CVE Feed

Product

SINEC NMS

by Siemens · last CVE Apr 14, 2026

On CISA KEVExploited in the wildRansomware-linked

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities63 In the news2 Timeline

Severity mix

Critical 8High 35Medium 18Low 2

Severity

All severities63 Critical8 High35 Medium18 Low2

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add SINEC NMS to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-40438 RansomwareIn wildKEV	9.0	100%	Sep 16	mod_proxy SSRF Affected: before 1.0.3
CVE-2023-44487 In wildKEV	7.5	100%	Oct 10	HTTP/2 Rapid Reset Attack Vulnerability Affected: before 3.0
CVE-2025-40736	9.8	0%	Jul 8	A vulnerability has been identified in SINEC NMS (All versions < V4.0) Affected: before 4.0
CVE-2024-33698	9.8	1%	Sep 10	A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1… Affected: 0
CVE-2024-23810	9.8	1%	Feb 13	A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1) Affected: before 2.0; 2.0
CVE-2021-39275	9.8	39%	Sep 16	ap_escape_quotes() may write beyond the end of a buffer when given malicious input Affected: All versions, or not specified
CVE-2024-41940	9.1	1%	Aug 13	A vulnerability has been identified in SINEC NMS (All versions < V3.0) Affected: before 3.0
CVE-2021-33725	9.1	1%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2021-33724	9.1	1%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2026-25654	8.8	0%	Apr 14	A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3) Affected: before V4.0 SP3
CVE-2025-40755	8.8	0%	Oct 14	A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP1) Affected: before 4.0; 4.0
CVE-2025-40738	8.8	13%	Jul 8	A vulnerability has been identified in SINEC NMS (All versions < V4.0) Affected: before 4.0
CVE-2025-40737	8.8	13%	Jul 8	A vulnerability has been identified in SINEC NMS (All versions < V4.0) Affected: before 4.0
CVE-2025-40735	8.8	1%	Jul 8	A vulnerability has been identified in SINEC NMS (All versions < V4.0) Affected: before 4.0
CVE-2024-41939	8.8	1%	Aug 13	A vulnerability has been identified in SINEC NMS (All versions < V3.0) Affected: before 3.0
CVE-2024-23812	8.8	1%	Feb 13	A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1) Affected: before 2.0; 2.0
CVE-2024-23811	8.8	0%	Feb 13	A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1) Affected: before 2.0; 2.0
CVE-2021-33729	8.8	2%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2024-2398	8.6	36%	Mar 27	HTTP/2 push headers memory-leak Affected: before V3.0 SP1
CVE-2026-25656	7.8	0%	Feb 10	A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All versions < V2.15.2.1) Affected: All versions, or not specified
CVE-2026-25655	7.8	0%	Feb 10	A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP2) Affected: before 4.0; 4.0; 4.0
CVE-2024-36398	7.8	0%	Aug 13	A vulnerability has been identified in SINEC NMS (All versions < V3.0) Affected: before 3.0
CVE-2022-30527	7.8	0%	Oct 10	A vulnerability has been identified in SINEC NMS (All versions < V2.0) Affected: before 2.0
CVE-2023-4807	7.8	2%	Sep 8	POLY1305 MAC implementation corrupts XMM registers on Windows Affected: before V3.0 SP1
CVE-2025-30176	7.5	1%	May 13	A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All… Affected: before 4.0
CVE-2025-30175	7.5	1%	May 13	A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All… Affected: before 4.0
CVE-2025-30174	7.5	1%	May 13	A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All… Affected: before 4.0
CVE-2024-28757	7.5	2%	Mar 10	libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate) Affected: before V3.0
CVE-2024-25062	7.5	1%	Feb 4	An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5 Affected: before V3.0
CVE-2023-52425	7.5	2%	Feb 4	libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are… Affected: before V3.0
CVE-2023-5363	7.5	4%	Oct 24	Incorrect cipher key & IV length processing Affected: before V3.0 SP1
CVE-2021-33726	7.5	1%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2021-34798	7.5	65%	Sep 16	Malformed requests may cause the server to dereference a NULL pointer Affected: All versions, or not specified
CVE-2019-6575	7.5	2%	Apr 17	A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl Affected: before 1.0; 1.0
CVE-2026-24032	7.3	0%	Apr 14	A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC) Affected: before V4.0 SP3
CVE-2021-33736	7.2	1%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2021-33735	7.2	1%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2021-33734	7.2	28%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2021-33733	7.2	15%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2021-33732	7.2	28%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2021-33731	7.2	47%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2021-33730	7.2	28%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2021-33728	7.2	2%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2021-42550	6.6	5%	Dec 16	In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute… Affected: before 1.0.3
CVE-2024-47808	6.5	0%	Nov 12	A vulnerability has been identified in SINEC NMS (All versions < V3.0 SP1) Affected: before 3.0; 3.0
CVE-2024-2466	6.5	1%	Mar 27	TLS certificate check bypass with mbedTLS Affected: before V3.0 SP1
CVE-2023-6129	6.5	2%	Jan 9	POLY1305 MAC implementation corrupts vector registers on PowerPC Affected: before V3.0 SP1
CVE-2023-46218	6.5	2%	Dec 7	This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or possible Affected: before V3.0 SP1
CVE-2023-39615	6.5	1%	Aug 29	Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c Affected: before V3.0
CVE-2021-33727	6.5	1%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0