Vulnerabilidades do Siemens Sinec Security Monitor
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Siemens Sinec Security Monitor: 3 registro(s), com versões afetadas e correções.cpe:2.3:a:siemens:sinec_security_monitor
CVE-2026-27661
Média · 4.3
CWE-1230 10/03/2026
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0)…
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application leaks confidential information in metadata, and files such as information on contributors and email address, on `SSM Server`.
CVE-2025-40831
Média · 6.5
CWE-20 09/12/2025
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The...
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause denial of service condition of the report functionality.
CVE-2025-40830
Média · 6.7
CWE-285 09/12/2025
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The...
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application does not have proper authorization checks for the file_transfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any file on server or sensor.