💣Exploit CVE-2024-47563 - Siemens SINEC Security Monitor File Path Validation Vulnerability (Path Traversal)

[Maksim]

CVE ID : CVE-2024-47563
Published : Oct. 8, 2024, 9:15 a.m. | 5 hours, 55 minutes ago
Description : A vulnerability has been identified in Siemens SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate a file path that is supplied to an endpoint intended to create CSR files. This could allow an unauthenticated remote attacker to create files in writable directories outside the intended location and thus compromise integrity of files in those writable directories.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.