<p>SINEC NMS before V4.0 SP3 contains an Authorization Bypass
vulnerability that could allow an attacker to bypass authorization
checks, leading to the ability to reset the password of any arbitrary
user account.</p>
<p>Siemens has released a new version for SINEC NMS and recommends to
update to the latest version.</p>
Source link
