ZDI-26-132: Siemens SINEC NMS Privilege Escalation Vulnerability

TL;DR

Uncontrolled search path element in Siemens SINEC NMS leads to local privilege escalation, rated CVSS 7.8 by ZDI.

What happened

['Local attackers can escalate privileges on affected installations', 'Exploitation requires initial low-privilege code execution']

Why it matters for ops

['Enables unauthorized access and potential system compromise']

Mitigation

• Update to patched version of Siemens SINEC NMS
• Implement strict least privilege policies

Action items

• Apply available security patches immediately
• Review system access controls and logging

Detection IOCs

• Uncontrolled search path element
• Privilege escalation attempts

Source link

http://www.zerodayinitiative.com/advisories/ZDI-26-132/