SINEC NMS vulnerabilities | LiveThreat CVE Feed

Product

SINEC NMS

by Siemens · last CVE Apr 14, 2026

On CISA KEVExploited in the wildRansomware-linked

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities63 In the news2 Timeline

Severity mix

Critical 8High 35Medium 18Low 2

Severity

All severities63 Critical8 High35 Medium18 Low2

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add SINEC NMS to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-44487 In wildKEV	7.5	100%	Oct 10	HTTP/2 Rapid Reset Attack Vulnerability Affected: before 3.0
CVE-2026-25654	8.8	0%	Apr 14	A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3) Affected: before V4.0 SP3
CVE-2025-40755	8.8	0%	Oct 14	A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP1) Affected: before 4.0; 4.0
CVE-2025-40738	8.8	13%	Jul 8	A vulnerability has been identified in SINEC NMS (All versions < V4.0) Affected: before 4.0
CVE-2025-40737	8.8	13%	Jul 8	A vulnerability has been identified in SINEC NMS (All versions < V4.0) Affected: before 4.0
CVE-2025-40735	8.8	1%	Jul 8	A vulnerability has been identified in SINEC NMS (All versions < V4.0) Affected: before 4.0
CVE-2024-41939	8.8	1%	Aug 13	A vulnerability has been identified in SINEC NMS (All versions < V3.0) Affected: before 3.0
CVE-2024-23812	8.8	1%	Feb 13	A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1) Affected: before 2.0; 2.0
CVE-2024-23811	8.8	0%	Feb 13	A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1) Affected: before 2.0; 2.0
CVE-2021-33729	8.8	2%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2024-2398	8.6	36%	Mar 27	HTTP/2 push headers memory-leak Affected: before V3.0 SP1
CVE-2026-25656	7.8	0%	Feb 10	A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All versions < V2.15.2.1) Affected: All versions, or not specified
CVE-2026-25655	7.8	0%	Feb 10	A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP2) Affected: before 4.0; 4.0; 4.0
CVE-2024-36398	7.8	0%	Aug 13	A vulnerability has been identified in SINEC NMS (All versions < V3.0) Affected: before 3.0
CVE-2022-30527	7.8	0%	Oct 10	A vulnerability has been identified in SINEC NMS (All versions < V2.0) Affected: before 2.0
CVE-2023-4807	7.8	2%	Sep 8	POLY1305 MAC implementation corrupts XMM registers on Windows Affected: before V3.0 SP1
CVE-2025-30176	7.5	1%	May 13	A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All… Affected: before 4.0
CVE-2025-30175	7.5	1%	May 13	A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All… Affected: before 4.0
CVE-2025-30174	7.5	1%	May 13	A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All… Affected: before 4.0
CVE-2024-28757	7.5	2%	Mar 10	libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate) Affected: before V3.0
CVE-2024-25062	7.5	1%	Feb 4	An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5 Affected: before V3.0
CVE-2023-52425	7.5	2%	Feb 4	libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are… Affected: before V3.0
CVE-2023-5363	7.5	4%	Oct 24	Incorrect cipher key & IV length processing Affected: before V3.0 SP1
CVE-2021-33726	7.5	1%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2021-34798	7.5	65%	Sep 16	Malformed requests may cause the server to dereference a NULL pointer Affected: All versions, or not specified
CVE-2019-6575	7.5	2%	Apr 17	A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl Affected: before 1.0; 1.0
CVE-2026-24032	7.3	0%	Apr 14	A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC) Affected: before V4.0 SP3
CVE-2021-33736	7.2	1%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2021-33735	7.2	1%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2021-33734	7.2	28%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2021-33733	7.2	15%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2021-33732	7.2	28%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2021-33731	7.2	47%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2021-33730	7.2	28%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2021-33728	7.2	2%	Oct 12	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0