Which versions of Sinec Nms are affected by CVE-2026-25654?

SINEC NMS versions prior to V4.0 SP3 contain a critical authorization flaw that allows authenticated users with low-privilege accounts to reset passwords of any user, including administrators,…

How to fix or mitigate CVE-2026-25654?

Within 24 hours: Identify all SINEC NMS deployments and document current versions; restrict network access to SINEC NMS administrative interfaces to trusted networks only. Within 7 days: Implement application-level monitoring for unauthorized password reset attempts; enforce multi-factor authentication for administrative accounts if supported by the product version. Within 30 days: Upgrade all SINEC NMS instances to version V4.0 SP3 or later once the patch becomes available; confirm upgrade completion and validate administrative access controls.

Sinec Nms CVE-2026-25654

Q: What is the CVSS score of CVE-2026-25654?

CVE-2026-25654 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-22236 HIGH

Authorization Bypass Through User-Controlled Key (CWE-639)

2026-04-14 siemens

GHSA-qw84-4pc7-fxvw

Authentication Bypass Sinec Nms

8.7

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 17, 2026 - 15:22 vuln.today

cvss_changed

CVSS changed

Apr 14, 2026 - 09:22 NVD

8.8 (HIGH) 8.7 (HIGH)

Analysis Generated

Apr 14, 2026 - 09:11 vuln.today

EUVD ID Assigned

Apr 14, 2026 - 09:00 euvd

EUVD-2026-22236

Analysis Generated

Apr 14, 2026 - 09:00 vuln.today

CVE Published

Apr 14, 2026 - 08:40 nvd

HIGH 8.7

DescriptionCVE.org

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3). Affected products do not properly validate user authorization when processing password reset requests. This could allow an authenticated remote attacker to bypass authorization checks, leading to the ability to reset the password of any arbitrary user account.

AnalysisAI

SINEC NMS versions prior to V4.0 SP3 allow authenticated remote attackers to reset any user account password due to improper authorization validation (CWE-639). An attacker with low-privilege credentials can escalate to administrative access by resetting privileged user passwords, enabling complete system compromise with high impact to confidentiality, integrity, and availability (CVSS 8.8). No public exploit code identified at time of analysis, though the network attack vector (AV:N) and low complexity (AC:L) increase exploitation feasibility for authenticated attackers.

Technical ContextAI

This vulnerability stems from CWE-639 (Authorization Bypass Through User-Controlled Key), affecting Siemens SINEC Network Management System (NMS) - an industrial network management platform for operational technology environments. The flaw occurs in the password reset functionality, where the application fails to verify whether the authenticated user has proper authorization to reset passwords for other accounts. According to the CPE identifier (cpe:2.3:a:siemens:sinec_nms), this affects all versions of the product prior to the patched release. The CVSS vector indicates network-accessible exploitation (AV:N) requiring low-privilege authentication (PR:L) with no user interaction (UI:N), meaning any authenticated user can exploit the weakness through direct API or web interface manipulation without requiring elevated credentials or social engineering.

RemediationAI

Upgrade SINEC NMS to version V4.0 SP3 or later, which contains fixes for the authorization bypass vulnerability. Siemens ProductCERT advisory SSA-605717 at https://cert-portal.siemens.com/productcert/html/ssa-605717.html provides official patching guidance and download instructions. As interim mitigations for systems that cannot be immediately upgraded, implement network segmentation to restrict SINEC NMS access to trusted management networks only, enforce strong authentication controls including multi-factor authentication where supported, monitor password reset activities for suspicious patterns, and review user account privileges to ensure least-privilege principles. Organizations should audit existing user accounts for unauthorized password changes that may have occurred prior to patching, particularly for administrative accounts.