SSA-801704 V1.0: Authentication Bypass Vulnerability in SINEC NMS

Risk Summary

<p>Siemens SINEC NMS when used with User Management Component (UMC) contains an authentication bypass vulnerability due to insufficient validation of user identity. This could allow an unauthenticated remote attacker to bypass authentication and gain unauthorized access to the application.</p> <p>Siemens has released a new version for SINEC NMS and recommends to update to the latest version.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)