An authorization flaw in Siemens SINEC NMS versions prior to V4.0 SP3 allows an authenticated attacker to craft a password reset request that bypasses user authorization checks. This flaw lets the attacker reset the password of any user account without needing proper clearance, potentially compromising system authentication and data. The vulnerability stems from missing validation of user permissions during the reset process and is categorized as CWE-639. If exploited, an attacker could take over user accounts, access restricted resources, and sabotage or exfiltrate data, effectively leading to a full account takeover.

The affected products are Siemens SINEC NMS, all versions earlier than 4.0 Service Pack 3. No additional vendor or version details are specified beyond the general family and version threshold.

The CVSS v3.1 score of 8.7 indicates high severity; however the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is a remote, authenticated request to the password reset endpoint. Exploitation requires the attacker to have valid credentials or otherwise be able to authenticate to the system, after which the flaw can be leveraged to reset any user account.