CVE-2025-40831

MEDIUM

SINEC Security Monitor < 4.10.0 - Authenticated Denial of Service via Report Generation Date Parameter

Title source: llm

Description

A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause denial of service condition of the report functionality.

References (1)

Core 1

Core References

Vendor Advisory

https://cert-portal.siemens.com/productcert/html/ssa-882673.html

Scores

CVSS v3 6.5

EPSS 0.0012

EPSS Percentile 30.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-20

Status published

Products (1)

siemens/sinec_security_monitor < 4.10.0

Published Dec 09, 2025

Tracked Since Feb 18, 2026