Description
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All versions < V2.15.2.1). The affected application permits improper modification of a configuration file by a low-privileged user.
This could allow an attacker to load malicious DLLs, potentially leading to arbitrary code execution with SYSTEM privileges.(ZDI-CAN-28108)
Published: 2026-02-10
Score: 8.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Arbitrary Code Execution
Action: Immediate Patch
AI Analysis

Impact

The vulnerability allows a low‑privileged user to modify a configuration file in Siemens SINEC NMS and the User Management Component. This can lead to loading malicious DLLs and executing arbitrary code with SYSTEM privileges. The weakness is identified as CWE‑427, an uncontrolled search path element.

Affected Systems

Siemens SINEC NMS versions earlier than V4.0 SP3; Siemens User Management Component versions earlier than V2.15.2.1.

Risk and Exploitability

The CVSS v3 score is 8.5, indicating high severity. The EPSS score is below 1 %, showing a very low exploitation probability at present, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local; a user with limited privileges needs only write access to the configuration file to trigger the exploit and can elevate privileges to SYSTEM through malicious DLL loading.

Generated by OpenCVE AI on April 15, 2026 at 15:14 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade Siemens SINEC NMS to version V4.0 SP3 or later.
  • Upgrade the User Management Component to version V2.15.2.1 or later.
  • Restrict file permissions on configuration files to prevent modification by low‑privileged users.

Generated by OpenCVE AI on April 15, 2026 at 15:14 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 15 Apr 2026 18:00:00 +0000

Type Values Removed Values Added
Title Improper Configuration File Modification Allows Arbitrary Code Execution with Elevated Privileges

Tue, 14 Apr 2026 09:00:00 +0000

Type Values Removed Values Added
Description A vulnerability has been identified in SINEC NMS (All versions), User Management Component (UMC) (All versions < V2.15.2.1). The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially leading to arbitrary code execution with SYSTEM privileges.(ZDI-CAN-28108) A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All versions < V2.15.2.1). The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially leading to arbitrary code execution with SYSTEM privileges.(ZDI-CAN-28108)

Thu, 12 Feb 2026 15:30:00 +0000

Type Values Removed Values Added
First Time appeared Siemens sinec Nms
CPEs cpe:2.3:a:siemens:sinec_nms:-:*:*:*:*:*:*:*
cpe:2.3:a:siemens:user_management_component:*:*:*:*:*:*:*:*
Vendors & Products Siemens sinec Nms

Tue, 10 Feb 2026 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 10 Feb 2026 12:45:00 +0000

Type Values Removed Values Added
First Time appeared Siemens
Siemens sinec-nms
Siemens user Management Component
Vendors & Products Siemens
Siemens sinec-nms
Siemens user Management Component

Tue, 10 Feb 2026 10:15:00 +0000

Type Values Removed Values Added
Description A vulnerability has been identified in SINEC NMS (All versions), User Management Component (UMC) (All versions < V2.15.2.1). The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially leading to arbitrary code execution with SYSTEM privileges.(ZDI-CAN-28108)
Weaknesses CWE-427
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 8.5, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Siemens Sinec-nms Sinec Nms User Management Component
cve-icon MITRE

Status: PUBLISHED

Assigner: siemens

Published:

Updated: 2026-04-14T08:40:44.535Z

Reserved: 2026-02-04T12:39:06.286Z

Link: CVE-2026-25656

cve-icon Vulnrichment

Updated: 2026-02-10T15:03:04.096Z

cve-icon NVD

Status : Modified

Published: 2026-02-10T10:15:59.880

Modified: 2026-04-14T09:16:35.313

Link: CVE-2026-25656

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-15T17:45:10Z

Weaknesses