VYPR
← All advisories
High severity8.8NVD Advisory· Published Jul 8, 2025· Updated Jun 17, 2026

CVE-2025-40737

CVE-2025-40737

Description

A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application does not properly validate file paths when extracting uploaded ZIP files. This could allow an attacker to write arbitrary files to restricted locations and potentially execute code with elevated privileges (ZDI-CAN-26571).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Siemens Foundation/Sinec Nms3 versions
    cpe:2.3:a:siemens:sinec_nms:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:siemens:sinec_nms:*:*:*:*:*:*:*:*range: <4.0
    • (no CPE)range: <V4.0
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.