Multiple Vulnerabilities in SINEC Security Monitor before V4.10.0

An attacker with local access and high privileges on the SINEC Security Monitor host could compromise the integrity and confidentiality of the security monitoring system, potentially allowing unauthorized modification of network security policies or exfiltration of sensitive security data.

This affects organizations running SINEC Security Monitor to oversee Siemens industrial network security, including utilities, manufacturing plants, and any facility using SINEC as their centralized security monitoring and policy enforcement system. The vulnerabilities impact the ability to trust the security decisions and audit logs generated by the monitoring tool.

An attacker must first gain local access to the SINEC Security Monitor server and possess high-level administrative credentials. Once authenticated, they can exploit the access control and input validation flaws to escalate privileges or inject malicious commands, compromising the monitoring system's integrity.