CVE-2025-40737 in SINEC NMSinformazioni

Riassunto

di MITRE • 08/07/2025

A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application does not properly validate file paths when extracting uploaded ZIP files. This could allow an attacker to write arbitrary files to restricted locations and potentially execute code with elevated privileges (ZDI-CAN-26571).

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsabile

Siemens

Prenotare

16/04/2025

Divulgazione

08/07/2025

Moderazione

accettato

CPE

pronto

EPSS

0.07166

KEV

no

Attività

molto basso

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2025-40737
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-40737
CVE Detailshttps://www.cvedetails.com/cve/CVE-2025-40737/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!