{"id":"CVE-2025-40737","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-40737","generatedAt":"2026-10-28T03:28:42.540Z","title":"A vulnerability has been identified in SINEC NMS (All versions < V4.0).","description":"A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application does not properly validate file paths when extracting uploaded ZIP files. This could allow an attacker to write arbitrary files to restricted locations and potentially execute code with elevated privileges (ZDI-CAN-26571).","published":"2025-07-08T11:15:30.000Z","lastModified":"2026-06-17T09:22:03.000Z","status":"Analyzed","sourceIdentifier":"productcert@siemens.com","cvss":{"version":"4.0","score":8.7,"severity":"HIGH","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-22"],"affected":["siemens/sinec nms"],"epss":{"score":0.13438,"percentile":0.96402,"date":"2026-10-26","history":[{"date":"2026-09-28","score":0.10429,"percentile":0.95588},{"date":"2026-10-09","score":0.13438,"percentile":0.96343}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 13.4%, higher than 96% of all known CVEs. Patch or mitigate before the next change window."},"changes":[{"kind":"epss","label":"EPSS jump","at":"2026-09-28T00:00:00.000Z","detail":{"to":0.10429,"from":0.09427,"percentile":0.95588},"summary":"EPSS moved from 9.4% to 10.4% probability of exploitation in the next thirty days."}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-078892.html","tags":["Vendor Advisory"],"source":"productcert@siemens.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-40737","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}