1. Home
  2. CVE Database
  3. CVE-2025-40831
MEDIUM · 6.5

CVE-2025-40831

A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application lacks input validation of date parameter in report generation functionality. This could...

Vulnerability Description

A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause denial of service condition of the report functionality.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
SiemensSinec Security Monitor< 4.10.0

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2025-40831?

CVE-2025-40831 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application lacks input validation of date parameter in report generation functionality. This could...

How severe is CVE-2025-40831?

CVE-2025-40831 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-40831?

Check the references section above for vendor advisories and patch information. Affected products include: Siemens Sinec Security Monitor.