Siemens Sinec Network Management System — known CVE vulnerabilities

Every CVE whose affected-product data names Siemens Sinec Network Management System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2022-22965 — CVSS 9.8 (critical) — actively exploited: A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The…
• CVE-2021-37201 — CVSS 8.8 (high): A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). The web interface of affected devices is vulnerable to a…
• CVE-2020-25237 — CVSS 8.1 (high): A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1 Update 1), SINEMA Server (All versions < V14.0 SP2 Update 2)…
• CVE-2021-37200 — CVSS 7.7 (high): A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). An attacker with access to the webserver of an affected system…
• CVE-2022-25311 — CVSS 7.3 (high): A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All…
• CVE-2021-33721 — CVSS 7.2 (high): A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2). The affected application incorrectly neutralizes special…
• CVE-2022-24281 — CVSS 7.2 (high): A vulnerability has been identified in SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). A privileged authenticated…
• CVE-2022-24282 — CVSS 7.2 (high): A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All…
• CVE-2020-7580 — CVSS 6.7 (medium): A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1…