Sinec Security Monitor
Monthly
SINEC Security Monitor versions before 4.9.0 expose sensitive metadata including contributor information and email addresses on the SSM Server, allowing authenticated attackers to obtain confidential data. The vulnerability requires valid credentials to exploit and poses a low-severity information disclosure risk with no availability or integrity impact.
Improper validation of the date parameter in the report-generation feature of Siemens SINEC Security Monitor (all versions below V4.10.0) allows an authenticated, low-privileged user to submit a malformed date value and degrade or halt report generation, producing a denial-of-service condition confined to that functionality. Exploitation requires a valid account and access to the reporting feature - the CVSS vectors (PR:L) confirm it is not reachable by anonymous or unauthenticated attackers - and no public exploit code has been identified at time of analysis, with EPSS placing likelihood of exploitation at 0.39% (31st percentile). Siemens has released V4.10.0, which resolves the flaw; overall this is a moderate-severity, availability-only issue with limited real-world urgency.
Improper authorization in Siemens SINEC Security Monitor below V4.10.0 allows an authenticated, low-privileged local user to abuse the file_transfer feature of the ssmctl-client command to read or write arbitrary files on the managed server or sensor. Exploitation requires access to the host and a pre-existing account that can invoke ssmctl-client, plus use of the unprotected file_transfer operation; there is no user interaction requirement and no non-default configuration is needed, and no public exploit code has been identified at time of analysis. Note that the vendor's CVSS 4.0 vector (8.4, PR:H) and the independent CVSS 3.1 assessment (7.8, PR:L) disagree on the privilege level required, so the true minimum privilege of the abusable account should be confirmed before final prioritization.
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). Rated critical severity (CVSS 9.3), this vulnerability is low attack complexity. No vendor patch available.
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). Rated critical severity (CVSS 9.4), this vulnerability is remotely exploitable, low attack complexity.
SINEC Security Monitor versions before 4.9.0 expose sensitive metadata including contributor information and email addresses on the SSM Server, allowing authenticated attackers to obtain confidential data. The vulnerability requires valid credentials to exploit and poses a low-severity information disclosure risk with no availability or integrity impact.
Improper validation of the date parameter in the report-generation feature of Siemens SINEC Security Monitor (all versions below V4.10.0) allows an authenticated, low-privileged user to submit a malformed date value and degrade or halt report generation, producing a denial-of-service condition confined to that functionality. Exploitation requires a valid account and access to the reporting feature - the CVSS vectors (PR:L) confirm it is not reachable by anonymous or unauthenticated attackers - and no public exploit code has been identified at time of analysis, with EPSS placing likelihood of exploitation at 0.39% (31st percentile). Siemens has released V4.10.0, which resolves the flaw; overall this is a moderate-severity, availability-only issue with limited real-world urgency.
Improper authorization in Siemens SINEC Security Monitor below V4.10.0 allows an authenticated, low-privileged local user to abuse the file_transfer feature of the ssmctl-client command to read or write arbitrary files on the managed server or sensor. Exploitation requires access to the host and a pre-existing account that can invoke ssmctl-client, plus use of the unprotected file_transfer operation; there is no user interaction requirement and no non-default configuration is needed, and no public exploit code has been identified at time of analysis. Note that the vendor's CVSS 4.0 vector (8.4, PR:H) and the independent CVSS 3.1 assessment (7.8, PR:L) disagree on the privilege level required, so the true minimum privilege of the abusable account should be confirmed before final prioritization.
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). Rated critical severity (CVSS 9.3), this vulnerability is low attack complexity. No vendor patch available.
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). Rated critical severity (CVSS 9.4), this vulnerability is remotely exploitable, low attack complexity.