SINEC NMS vulnerabilities | LiveThreat CVE Feed

Product

SINEC NMS

by Siemens · last CVE Apr 14, 2026

On CISA KEVExploited in the wildRansomware-linked

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities63 In the news2 Timeline

Severity mix

Critical 8High 35Medium 18Low 2

Severity

All severities63 Critical8 High35 Medium18 Low2

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add SINEC NMS to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-33723	6.5	1%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2024-2379	6.3	2%	Mar 27	QUIC certificate check bypass with wolfSSL Affected: before V3.0 SP1
CVE-2023-6237	5.9	2%	Apr 25	Excessive time spent checking invalid RSA public keys Affected: before V3.0 SP1
CVE-2023-52426	5.5	0%	Feb 4	libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time Affected: before V3.0
CVE-2024-0727	5.5	3%	Jan 26	PKCS12 Decoding crashes Affected: before V3.0 SP1
CVE-2023-44315	5.4	0%	Oct 10	A vulnerability has been identified in SINEC NMS (All versions < V2.0) Affected: before 2.0
CVE-2024-28182	5.3	85%	Apr 4	Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage Affected: before V3.0
CVE-2023-46219	5.3	1%	Dec 12	When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should… Affected: before V3.0 SP1
CVE-2023-5678	5.3	4%	Nov 6	Excessive time spent in DH check / generation with large Q parameter value Affected: before V3.0 SP1
CVE-2021-33722	4.9	1%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2024-41941	4.3	0%	Aug 13	A vulnerability has been identified in SINEC NMS (All versions < V3.0) Affected: before 3.0
CVE-2024-41938	3.8	0%	Aug 13	A vulnerability has been identified in SINEC NMS (All versions < V3.0) Affected: before 3.0
CVE-2024-2004	3.5	2%	Mar 27	Usage of disabled protocol Affected: before V3.0 SP1