Siemens SINEC Security Monitor Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Siemens SINEC Security Monitor, affecting all versions prior to 4.10.0. The issue arises from the application's failure to properly validate date parameters in the report generation feature. This lack of input validation could enable an authenticated, lowly privileged attacker to disrupt the report functionality.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition in the report generation feature.

Remediation

Users are advised to update SINEC Security Monitor to version 4.10.0 or later. Additional guidance can be found on the Siemens support website.