A critical SQL injection vulnerability in Siemens SINEC NMS allows authenticated low-privileged attackers to gain elevated privileges through the getTotalAndFilterCounts endpoint.

This is an SQL injection flaw (CWE-89) located in the getTotalAndFilterCounts endpoint. An authenticated, low-privileged attacker can inject malicious SQL commands to modify database contents and achieve privilege escalation.

The ability for an authenticated user to perform SQL injection and escalate privileges poses a significant risk to the integrity and confidentiality of the network management system. Given the CVSS score of 8.8, this vulnerability is classified as High severity. Successful exploitation could lead to unauthorized administrative control over the management platform, potentially facilitating further lateral movement or disruption of industrial network monitoring.

Immediate Action: Upgrade Siemens SINEC NMS to version V4.0 SP1 or later as specified in the official Siemens security advisory.

Proactive Monitoring: Review system access logs for unusual patterns or suspicious database queries originating from low-privileged user accounts.

Compensating Controls: Implement strict network segmentation to limit access to the management interface and deploy a Web Application Firewall to filter malicious SQL syntax from incoming requests.

Public Exploit Available: No

This vulnerability represents a significant security risk for environments utilizing Siemens SINEC NMS. Organizations should prioritize updating their software to version V4.0 SP1 immediately to eliminate the underlying SQL injection flaw and prevent potential privilege escalation by malicious insiders or compromised user accounts.