SINEC Security Monitor vulnerabilities

2 known vulnerabilities in SINEC Security Monitor from Siemens. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  SINEC Security Monitor: Improper Neutralization of Special Elements used in a Command

  CVE-2024-47562Oct 8, 2024Siemens

  A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly neutralize special elements in user input to the ```ssmctl-client``` command. This could allow an authenticated, lowly privileged

• 9.9 Critical severity

  SINEC Security Monitor: Improper Neutralization of Argument Delimiters in a Command

  CVE-2024-47553Oct 8, 2024Siemens

  A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate user input to the ```ssmctl-client``` command. This could allow an authenticated, lowly privileged remote attacker to exe