6.7
Moyenne
CVE-2025-40830 A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0)
Description
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application does not have proper authorization checks for the file_transfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any file on server or sensor.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SINEC Security Monitor 4.10 | premières → < 4.10.0 | 4.10.0 |
Références
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de SINEC Security Monitor
Les 8 CVE de SINEC Security Monitor →
CVE-2026-27661
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0)
4.3
Moyenne
CVE-2025-15467
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can…
Non notée
CVE-2025-40831
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0)
6.5
Moyenne
CVE-2024-47565
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0)
4.3
Moyenne