SiRcom SMART Alert Missing Authentication Vulnerability Allowing Unauthorized Access to Backend APIs

A vulnerability in SiRcom SMART Alert (SiSA) version 3.0.48 allows unauthorized access to backend APIs, enabling an unauthenticated attacker to bypass the login screen and access restricted areas of the application. This missing authentication for critical functions could lead to unauthorized manipulation of emergency sirens.

Impact

Exploitation of this vulnerability could allow an attacker to remotely activate or control emergency sirens.

Remediation

SiRcom has not responded to CISA's request for coordination. Contact SiRcom through their contact page for more information. CISA recommends minimizing network exposure for control system devices, locating them behind firewalls, and using secure remote access methods like VPNs. Organizations should also perform impact analysis and risk assessment before deploying defensive measures.