9.9
Critical
CVE-2024-47553 A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0)
Description
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate user input to the ```ssmctl-client``` command. This could allow an authenticated, lowly privileged remote attacker to execute arbitrary code with root privileges on the underlying OS.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens SINEC Security Monitor 4.9 | earliest → < 4.9.0 | 4.9.0 |
| sinec_security_monitor 4.9 | earliest → < 4.9.0 | 4.9.0 |
| SINEC Security Monitor 4.9 | earliest → < 4.9.0 | 4.9.0 |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of Siemens SINEC Security Monitor
The 4 CVEs of Siemens SINEC Security Monitor →
CVE-2024-47565
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0)
4.3
Medium
CVE-2024-47563
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0)
5.3
Medium
CVE-2024-47562
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0)
8.8
High