[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRaCbOzrCigVdsHiu1Z0XfjHviL-xcAm3zbgDJI9XH3o":3,"g5a-family:siemens\u002Fsinec_nms":109,"g5a-ex:siemens\u002Fsinec_nms@*":110},{"success":4,"data":5},true,{"product":6,"versions":29,"topVulnerabilitiesByEpss":35,"kevVulnerabilities":83,"seoMetadata":88,"meta":107},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":28},"siemens","sinec_nms",5,38,1,"2025-07-08",[14,19,21,24,26],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"1.0",16,0,false,{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},"1.0.3",{"version":22,"cve_count":23,"kev_count":17,"has_kev":18},"2.0",3,{"version":25,"cve_count":11,"kev_count":17,"has_kev":18},"3.0",{"version":27,"cve_count":17,"kev_count":17,"has_kev":18},"4.0","Sinec Nms by Siemens is a technology product with 5 tracked versions and 38 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[30,31,32,33,34],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},{"version":22,"cve_count":23,"kev_count":17,"has_kev":18},{"version":25,"cve_count":11,"kev_count":17,"has_kev":18},{"version":27,"cve_count":17,"kev_count":17,"has_kev":18},[36,44,50,57,63,68,71,73,75,78],{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":4,"epssScore":43},"CVE-2021-40438","A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","2021-09-16",9,"v3.1","Critical",0.99999,{"cveId":45,"description":46,"publishedDate":39,"cvssScore":47,"cvssVersion":41,"severity":48,"isKev":18,"epssScore":49},"CVE-2021-34798","Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.",7.5,"High",0.64509,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":54,"cvssVersion":41,"severity":55,"isKev":18,"epssScore":56},"CVE-2021-3449","An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).","2021-03-25",5.9,"Medium",0.63542,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":41,"severity":48,"isKev":18,"epssScore":62},"CVE-2021-33731","A vulnerability has been identified in SINEC NMS (All versions \u003C V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application.","2021-10-12",7.2,0.46587,{"cveId":64,"description":65,"publishedDate":39,"cvssScore":66,"cvssVersion":41,"severity":42,"isKev":18,"epssScore":67},"CVE-2021-39275","ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party \u002F external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.",9.8,0.39402,{"cveId":69,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":41,"severity":48,"isKev":18,"epssScore":70},"CVE-2021-33732",0.27685,{"cveId":72,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":41,"severity":48,"isKev":18,"epssScore":70},"CVE-2021-33734",{"cveId":74,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":41,"severity":48,"isKev":18,"epssScore":70},"CVE-2021-33730",{"cveId":76,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":41,"severity":48,"isKev":18,"epssScore":77},"CVE-2021-33733",0.15385,{"cveId":79,"description":80,"publishedDate":12,"cvssScore":81,"cvssVersion":41,"severity":48,"isKev":18,"epssScore":82},"CVE-2025-40737","A vulnerability has been identified in SINEC NMS (All versions \u003C V4.0). The affected application does not properly validate file paths when extracting uploaded ZIP files. This could allow an attacker to write arbitrary files to restricted locations and potentially execute code with elevated privileges (ZDI-CAN-26571).",8.8,0.13438,[84],{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"severity":42,"isKev":4,"epssScore":43,"cisaVulnName":85,"cisaDateAdded":86,"cisaShortDescription":38,"cisaRequiredAction":87},"Apache HTTP Server-Side Request Forgery (SSRF)","2021-12-01","Apply updates per vendor instructions.",{"title":89,"metaDescription":90,"keywords":91,"structuredData":92},"Sinec Nms by Siemens - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Sinec Nms by Siemens covering 5 versions with 38 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Sinec Nms vulnerabilities, Sinec Nms security, Sinec Nms CVE, Siemens Sinec Nms, Sinec Nms threat intelligence, Siemens security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Sinec Nms KEV, Sinec Nms exploited vulnerabilities",{"@context":93,"@type":94,"name":95,"description":90,"url":96,"manufacturer":97,"applicationCategory":101,"softwareVersion":102,"mainEntity":103},"https:\u002F\u002Fschema.org","SoftwareApplication","Sinec Nms","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsiemens\u002Fsinec_nms",{"@type":98,"name":99,"url":100},"Organization","Siemens","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsiemens","Security Software","5 versions tracked",{"@type":104,"name":105,"description":106,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Sinec Nms Security Vulnerabilities","Security vulnerabilities affecting Sinec Nms by Siemens",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":108,"apiVersion":25},"2026-10-17T22:24:44.017Z",[],{"rows":111,"total":11,"capped":18,"failed":17},[112],{"cveId":37,"name":85,"severity":42,"cvss":40,"added":86,"epss":43,"published":113,"ranges":114,"checked":4,"hits":116,"covers":18},"2021-09-16T15:15:07.633",[115],"before 1.0.3",[]]