Siemens

Sinec Security Monitor

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2025-40831

  • EPSS 0.05%
  • Veröffentlicht 09.12.2025 10:44:33
  • Zuletzt bearbeitet 10.12.2025 21:38:30

A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker...

6.7

CVE-2025-40830

  • EPSS 0.01%
  • Veröffentlicht 09.12.2025 10:44:32
  • Zuletzt bearbeitet 10.12.2025 21:38:56

A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application does not have proper authorization checks for the file_transfer feature in ssmctl-client command. This could allow an authenticated, lowl...

8.8

CVE-2024-47562

  • EPSS 0.1%
  • Veröffentlicht 08.10.2024 09:15:18
  • Zuletzt bearbeitet 11.10.2024 20:04:35

A vulnerability has been identified in Siemens SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly neutralize special elements in user input to the ```ssmctl-client``` command. This could allow an authenticated...

5.3

CVE-2024-47563

  • EPSS 0.22%
  • Veröffentlicht 08.10.2024 09:15:18
  • Zuletzt bearbeitet 11.10.2024 20:05:05

A vulnerability has been identified in Siemens SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate a file path that is supplied to an endpoint intended to create CSR files. This could allow an unauthen...

4.3

CVE-2024-47565

  • EPSS 0.12%
  • Veröffentlicht 08.10.2024 09:15:18
  • Zuletzt bearbeitet 11.10.2024 20:05:59

A vulnerability has been identified in Siemens SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate that user input complies with a list of allowed values. This could allow an authenticated remote attac...

9.9

CVE-2024-47553

  • EPSS 2.54%
  • Veröffentlicht 08.10.2024 09:15:17
  • Zuletzt bearbeitet 11.10.2024 20:04:08

A vulnerability has been identified in Siemens SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate user input to the ```ssmctl-client``` command. This could allow an authenticated, lowly privileged rem...