8.8
Élevée
CVE-2024-47562 A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0)
Description
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly neutralize special elements in user input to the ```ssmctl-client``` command. This could allow an authenticated, lowly privileged local attacker to execute privileged commands in the underlying OS.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Siemens SINEC Security Monitor 4.9 | premières → < 4.9.0 | 4.9.0 |
| sinec_security_monitor 4.9 | premières → < 4.9.0 | 4.9.0 |
| SINEC Security Monitor 4.9 | premières → < 4.9.0 | 4.9.0 |
Références
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Siemens SINEC Security Monitor
Les 4 CVE de Siemens SINEC Security Monitor →
CVE-2024-47565
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0)
4.3
Moyenne
CVE-2024-47563
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0)
5.3
Moyenne
CVE-2024-47553
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0)
9.9
Critique