6.5
Moyenne
CVE-2025-40831 A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0)
Description
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause denial of service condition of the report functionality.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SINEC Security Monitor 4.10 | premières → < 4.10.0 | 4.10.0 |
Références
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de SINEC Security Monitor
Les 8 CVE de SINEC Security Monitor →
CVE-2026-27661
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0)
4.3
Moyenne
CVE-2025-15467
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can…
Non notée
CVE-2025-40830
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0)
6.7
Moyenne
CVE-2024-47565
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0)
4.3
Moyenne