CVE-2025-13483

Missing Authentication for Critical Function in SiRcom SMART Alert (SiSA) PUBLISHED

Description (CNA)

SiRcom SMART Alert (SiSA) allows unauthorized access to backend APIs. This allows an unauthenticated attacker to bypass the login screen using browser developer tools, gaining access to restricted parts of the application.

Affected (CNA)

Vendor / product	Versions
SiRcom / SMART Alert (SiSA	affected 3.0.48

CWE

CWE-306

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-06

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.