Sinec Security Monitor
Approved changes feed: RSS · Atom
cpe:2.3:a:siemens:sinec_security_monitor:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Sinec Security Monitor (145c9e82-3f92-572b-9c14-9156abd8895e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-27661 |
vulnerable | 2026-06-08 07:53:22.815868 |
Details available
MEDIUM (4.3)
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application leaks confidential information in metadata, and files such as information on contributors and email address, on `SSM Server`.
Published: 2026-03-10T16:07:59.645Z
Updated: 2026-03-10T16:41:08.844Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-40831 |
vulnerable | 2026-06-08 07:25:05.993594 |
Details available
MEDIUM (6.5)
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause denial of service condition of the report functionality.
Published: 2025-12-09T10:44:33.449Z
Updated: 2025-12-09T15:37:58.195Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-40830 |
vulnerable | 2026-06-08 07:25:05.993157 |
Details available
MEDIUM (6.7)
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application does not have proper authorization checks for the file_transfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any file on server or sensor.
Published: 2025-12-09T10:44:32.353Z
Updated: 2025-12-09T15:45:31.431Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47565 |
vulnerable | 2026-06-08 06:48:12.698683 |
Details available
MEDIUM (4.3)
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate that user input complies with a list of allowed values.
This could allow an authenticated remote attacker to compromise the integrity of the configuration of the affected application.
Published: 2024-10-08T08:40:54.092Z
Updated: 2026-03-10T16:07:42.562Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47563 |
vulnerable | 2026-06-08 06:48:12.698324 |
Details available
MEDIUM (5.3)
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate a file path that is supplied to an endpoint intended to create CSR files.
This could allow an unauthenticated remote attacker to create files in writable directories outside the intended location and thus compromise integrity of files in those writable directories.
Published: 2024-10-08T08:40:52.852Z
Updated: 2026-03-10T16:07:41.489Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47562 |
vulnerable | 2026-06-08 06:48:12.697933 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47553 |
vulnerable | 2026-06-08 06:48:12.666936 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.