1. Home
  2. CVE Database
  3. CVE-2024-47563
MEDIUM · 5.3

CVE-2024-47563

A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate a file path that is supplied to an endpoint intended to creat...

Vulnerability Description

A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate a file path that is supplied to an endpoint intended to create CSR files. This could allow an unauthenticated remote attacker to create files in writable directories outside the intended location and thus compromise integrity of files in those writable directories.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
SiemensSinec Security Monitor< 4.9.0

Related Weaknesses (CWE)

CWE-22

References

FAQ

What is CVE-2024-47563?

CVE-2024-47563 is a vulnerability with a CVSS score of 5.3 (MEDIUM). A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate a file path that is supplied to an endpoint intended to creat...

How severe is CVE-2024-47563?

CVE-2024-47563 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-47563?

Check the references section above for vendor advisories and patch information. Affected products include: Siemens Sinec Security Monitor.