ZDI-CAN-27564: ZDI-26-298: Siemens SINEC NMS Authentication Bypass Vulnerability
Published Apr 23, 2026
·Updated
This vulnerability allows remote attackers to bypass authentication on affected installations of Siemens SINEC NMS. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2026-24032.
Affected Software
1 affected component
Siemens SINEC NMS
Event History
Apr 23, 2026
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-27564?
The severity of ZDI-CAN-27564 is rated as 7.3 according to the CVSS score.
2
How do I fix ZDI-CAN-27564?
To fix ZDI-CAN-27564, apply the latest security patches provided by Siemens for SINEC NMS.
3
Who is affected by ZDI-CAN-27564?
ZDI-CAN-27564 affects installations of Siemens SINEC NMS.
4
Can ZDI-CAN-27564 be exploited without authentication?
Yes, ZDI-CAN-27564 allows remote attackers to bypass authentication without needing any credentials.
5
What type of vulnerability is ZDI-CAN-27564?
ZDI-CAN-27564 is classified as an authentication bypass vulnerability.