Количество 3
Количество 3
CVE-2026-25656
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All versions < V2.15.2.1). The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially leading to arbitrary code execution with SYSTEM privileges.(ZDI-CAN-28108)
GHSA-43rq-xvwq-hp7q
A vulnerability has been identified in SINEC NMS (All versions), User Management Component (UMC) (All versions < V2.15.2.1). The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially leading to arbitrary code execution with SYSTEM privileges.(ZDI-CAN-28108)
BDU:2026-05799
Уязвимость компонента User Management Component (UMC) системы управления сетями передачи данных SINEC NMS, позволяющая нарушителю выполнить произвольный код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2026-25656 A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All versions < V2.15.2.1). The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially leading to arbitrary code execution with SYSTEM privileges.(ZDI-CAN-28108) | CVSS3: 7.8 | 0% Низкий | 6 месяцев назад | |
GHSA-43rq-xvwq-hp7q A vulnerability has been identified in SINEC NMS (All versions), User Management Component (UMC) (All versions < V2.15.2.1). The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially leading to arbitrary code execution with SYSTEM privileges.(ZDI-CAN-28108) | CVSS3: 7.8 | 0% Низкий | 6 месяцев назад | |
BDU:2026-05799 Уязвимость компонента User Management Component (UMC) системы управления сетями передачи данных SINEC NMS, позволяющая нарушителю выполнить произвольный код | CVSS3: 7.8 | 0% Низкий | 6 месяцев назад |
Уязвимостей на страницу