Siemens Sinec Security Monitor vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Siemens Sinec Security Monitor: 3 record(s), with affected versions and fixes.cpe:2.3:a:siemens:sinec_security_monitor
CVE-2026-27661
Medium · 4.3
CWE-1230 Mar 10, 2026
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0)…
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application leaks confidential information in metadata, and files such as information on contributors and email address, on `SSM Server`.
CVE-2025-40831
Medium · 6.5
CWE-20 Dec 9, 2025
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The...
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause denial of service condition of the report functionality.
CVE-2025-40830
Medium · 6.7
CWE-285 Dec 9, 2025
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The...
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application does not have proper authorization checks for the file_transfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any file on server or sensor.