Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7f3f-wq83-6q76

Опубликовано: 14 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 7.3

Описание

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC). The affected application contains an authentication weakness due to insufficient validation of user identity in the UMC component. This could allow an unauthenticated remote attacker to bypass authentication and gain unauthorized access to the application. (ZDI-CAN-27564)

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC). The affected application contains an authentication weakness due to insufficient validation of user identity in the UMC component. This could allow an unauthenticated remote attacker to bypass authentication and gain unauthorized access to the application. (ZDI-CAN-27564)

EPSS

Процентиль: 16%
0.00251
Низкий

6.9 Medium

CVSS4

7.3 High

CVSS3

Дефекты

CWE-347

Связанные уязвимости

CVSS3: 7.3
nvd
4 месяца назад

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC). The affected application contains an authentication weakness due to insufficient validation of user identity in the UMC component. This could allow an unauthenticated remote attacker to bypass authentication and gain unauthorized access to the application. (ZDI-CAN-27564)

CVSS3: 7.3
fstec
4 месяца назад

Уязвимость системы сетевого управления для мониторинга промышленными сетями Siemens SINEC NMS, связанная с ошибками проверки криптографической подписи, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 16%
0.00251
Низкий

6.9 Medium

CVSS4

7.3 High

CVSS3

Дефекты

CWE-347