SINEC Security Monitor Vulnerability Affects Authentication and Privilege Escalation
CVE-2024-47562

9.3CRITICAL

Key Information:

Vendor

Siemens
Status
Sinec Security Monitor
Vendor
CVE Published:
8 October 2024

What is CVE-2024-47562?

A vulnerability has been detected in the Siemens SINEC Security Monitor, specifically affecting all versions prior to V4.9.0. This security issue arises due to inadequate neutralization of special elements in user input sent to the 'ssmctl-client' command. As a result, an authenticated local attacker with low privileges could exploit this weakness to execute privileged commands within the underlying operating system. This poses potential risks to system integrity and data security.

Affected Version(s)

SINEC Security Monitor 0

References

https://cert-portal.siemens.com/productcert/html/ssa-4304...

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.