Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-47563

A vulnerability has been identified in Siemens SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate a file path that is supplied to an endpoint intended to create CSR files. This could allow an unauthenticated remote attacker to create files in writable directories outside the intended location and thus compromise integrity of files in those writable directories.

Published

2024-10-08T09:15:18.403

Last Modified

2024-10-11T20:05:05.143

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-22
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application siemens sinec_security_monitor < 4.9.0 Yes
References