6.5
Medium
CVE-2025-40831 A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0)
Description
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause denial of service condition of the report functionality.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SINEC Security Monitor 4.10 | earliest → < 4.10.0 | 4.10.0 |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of SINEC Security Monitor
The 8 CVEs of SINEC Security Monitor →
CVE-2026-27661
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0)
4.3
Medium
CVE-2025-15467
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can…
Not rated
CVE-2025-40830
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0)
6.7
Medium
CVE-2024-47565
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0)
4.3
Medium