A critical authorization flaw in Siemens SINEC NMS allows authenticated remote attackers to hijack arbitrary user accounts by resetting passwords without proper validation.

This vulnerability is an authorization bypass (CWE-639) occurring when the application processes password reset requests. An attacker with existing low-level authenticated access can manipulate these requests to change the password of any other user account, including administrative accounts.

The ability for an authenticated user to reset any account password poses a significant risk to organizational security. This flaw could lead to full unauthorized access to the network management system, resulting in complete compromise of managed network infrastructure, data exposure, and potential service disruption. With a CVSS score of 8.8, this vulnerability is classified as High severity and warrants immediate remediation.

Immediate Action: Upgrade Siemens SINEC NMS to version V4.0 SP3 or later as specified in the vendor security advisory.

Proactive Monitoring: Review audit logs for suspicious password reset activity or unauthorized account modifications performed by standard user accounts.

Compensating Controls: Limit access to the SINEC NMS management interface to trusted internal networks and enforce strict user privilege management until the patch is applied.

Public Exploit Available: Unknown

Given the severity of the impact, organizations utilizing Siemens SINEC NMS should prioritize applying the vendor-provided update to V4.0 SP3 immediately. Failure to address this vulnerability allows malicious actors with valid credentials to escalate privileges and gain full control over the management environment.