Siemens SINEC Security Monitor

• CVE-2026-27661 Medium 4.3 A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application leaks confidential information in metadata, and files such as information on contributor 0.3%
• CVE-2025-40831 Medium 6.5 A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application lacks input validation of date parameter in report generation functionality. This could 0.4%
• CVE-2025-40830 Medium 6.7 A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application does not have proper authorization checks for the file_transfer feature in ssmctl-clien 0.2%
• CVE-2024-47565 Medium 4.3 A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate that user input complies with a list of allowed values. This 0.4%
• CVE-2024-47563 Medium 5.3 A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate a file path that is supplied to an endpoint intended to creat 0.5%
• CVE-2024-47562 High 8.8 A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly neutralize special elements in user input to the ```ssmctl-client``` c 0.3%
• CVE-2024-47553 Critical 9.9 A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate user input to the ```ssmctl-client``` command. This could al 0.8%