Количество 3
Количество 3
CVE-2025-40830
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application does not have proper authorization checks for the file_transfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any file on server or sensor.
GHSA-35cr-f3qc-gm6j
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application does not have proper authorization checks for the file_transfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any file on server or sensor.
BDU:2025-15617
Уязвимость функции file_transfer() программного обеспечения для обеспечения безопасности SINEC Security Monitor, позволяющая нарушителю получить доступ на чтение и запись произвольных файлов
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-40830 A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application does not have proper authorization checks for the file_transfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any file on server or sensor. | CVSS3: 6.7 | 0% Низкий | 9 дней назад |
| GHSA-35cr-f3qc-gm6j A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application does not have proper authorization checks for the file_transfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any file on server or sensor. | CVSS3: 6.7 | 0% Низкий | 9 дней назад |
 | BDU:2025-15617 Уязвимость функции file_transfer() программного обеспечения для обеспечения безопасности SINEC Security Monitor, позволяющая нарушителю получить доступ на чтение и запись произвольных файлов | CVSS3: 6.7 | 0% Низкий | 10 дней назад |
Уязвимостей на страницу