Siemens SINEC Security Monitor Path Traversal

The vulnerability of the Siemens SINEC Security Monitor network security monitoring application is related to an incorrect restriction on the path name to the restricted directories. Exploiting this vulnerability could allow a malicious actor to create files in arbitrary directories remotely...

CVE-2024-47562

A vulnerability has been identified in SINEC Security Monitor All versions V4.9.0. The affected application does not properly neutralize special elements in user input to the ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to execute privileged commands i...