8.8
High
CVE-2024-47562 A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0)
Description
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly neutralize special elements in user input to the ```ssmctl-client``` command. This could allow an authenticated, lowly privileged local attacker to execute privileged commands in the underlying OS.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens SINEC Security Monitor 4.9 | earliest → < 4.9.0 | 4.9.0 |
| sinec_security_monitor 4.9 | earliest → < 4.9.0 | 4.9.0 |
| SINEC Security Monitor 4.9 | earliest → < 4.9.0 | 4.9.0 |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of Siemens SINEC Security Monitor
The 4 CVEs of Siemens SINEC Security Monitor →
CVE-2024-47565
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0)
4.3
Medium
CVE-2024-47563
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0)
5.3
Medium
CVE-2024-47553
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0)
9.9
Critical