SINEC Security Monitor Vulnerability Affects Authentication and Privilege Escalation

CVE-2024-47562

Summary

A vulnerability has been detected in the Siemens SINEC Security Monitor, specifically affecting all versions prior to V4.9.0. This security issue arises due to inadequate neutralization of special elements in user input sent to the 'ssmctl-client' command. As a result, an authenticated local attacker with low privileges could exploit this weakness to execute privileged commands within the underlying operating system. This poses potential risks to system integrity and data security.

References