6.7
Medium
CVE-2025-40830 A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0)
Description
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application does not have proper authorization checks for the file_transfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any file on server or sensor.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SINEC Security Monitor 4.10 | earliest → < 4.10.0 | 4.10.0 |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of SINEC Security Monitor
The 8 CVEs of SINEC Security Monitor →
CVE-2026-27661
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0)
4.3
Medium
CVE-2025-15467
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can…
Not rated
CVE-2025-40831
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0)
6.5
Medium
CVE-2024-47565
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0)
4.3
Medium