{"id":"CVE-2025-40831","state":"PUBLISHED","title":"A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application lacks input validation of date parameter in report generation funct","description":"A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause denial of service condition of the report functionality.","publishedAt":"2025-12-09T10:44:33.449Z","updatedAt":"2025-12-09T15:37:58.195Z","severity":{"score":7.1,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","source":"siemens"},"assigner":"siemens","products":["Siemens SINEC Security Monitor"],"affected":[{"vendor":"Siemens","product":"SINEC Security Monitor","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V4.10.0","versionType":"custom"}]}],"references":["https://cert-portal.siemens.com/productcert/html/ssa-882673.html"],"weaknesses":["CWE-20"],"ingestedAt":"2026-10-29T20:09:09.358Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/40xxx/CVE-2025-40831.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-40831","state":"PUBLISHED","datePublished":"2025-12-09T10:44:33.449Z","dateUpdated":"2025-12-09T15:37:58.195Z","assignerShortName":"siemens","assignerOrgId":"cec7a2ec-15b4-4faf-bd53-b40f371f3a77","dateReserved":"2025-04-16T08:50:26.976Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause denial of service condition of the report functionality."}],"affected":[{"vendor":"Siemens","product":"SINEC Security Monitor","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V4.10.0","versionType":"custom"}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-882673.html"}],"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM"}},{"cvssV4_0":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","baseScore":7.1,"baseSeverity":"HIGH"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-20","lang":"en","description":"CWE-20: Improper Input Validation","type":"CWE"}]}],"providerMetadata":{"shortName":"siemens","orgId":"cec7a2ec-15b4-4faf-bd53-b40f371f3a77","dateUpdated":"2025-12-09T10:44:33.449Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-12-09T15:37:48.721938Z","id":"CVE-2025-40831","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-12-09T15:37:58.195Z"}}]}}}