A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application does not have proper authorization checks for the file_transfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any file on server or sensor.

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Vendors Products
Siemens
  • Sinec Security Monitor

Configuration 1 [-]

cpe:2.3:a:siemens:sinec_security_monitor:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://cert-portal.siemens.com/productcert/html/ssa-882673.html cve-icon cve-icon
History

Wed, 10 Dec 2025 21:45:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:siemens:sinec_security_monitor:*:*:*:*:*:*:*:*

Wed, 10 Dec 2025 18:00:00 +0000

Type Values Removed Values Added
First Time appeared Siemens
Siemens sinec Security Monitor
Vendors & Products Siemens
Siemens sinec Security Monitor

Tue, 09 Dec 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 09 Dec 2025 11:00:00 +0000

Type Values Removed Values Added
Description A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application does not have proper authorization checks for the file_transfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any file on server or sensor.
Weaknesses CWE-285
References
Metrics cvssV3_1

{'score': 6.7, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 8.4, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}
cve-icon MITRE

Status: PUBLISHED

Assigner: siemens

Published: 2025-12-09T10:44:32.353Z

Updated: 2025-12-09T15:45:31.431Z

Reserved: 2025-04-16T08:50:26.976Z

Link: CVE-2025-40830

cve-icon Vulnrichment

Updated: 2025-12-09T15:45:27.917Z

cve-icon NVD

Status : Analyzed

Published: 2025-12-09T16:17:46.677

Modified: 2025-12-10T21:38:56.833

Link: CVE-2025-40830

cve-icon Redhat

No data.