CVE-2024-47563 — Siemens / SINEC Security Monitor

CVE-2024-47563

Siemens / SINEC Security Monitor PUBLISHED

Description (CNA)

A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate a file path that is supplied to an endpoint intended to create CSR files. This could allow an unauthenticated remote attacker to create files in writable directories outside the intended location and thus compromise integrity of files in those writable directories.

Affected (CNA)

Vendor / product	Versions
Siemens / SINEC Security Monitor	affected 0 before V4.9.0

CWE

CWE-22

References

https://cert-portal.siemens.com/productcert/html/ssa-430425.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.