漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application does not have proper authorization checks for the file_transfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any file on server or sensor.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
授权机制不恰当
Vulnerability Title
Siemens SINEC Security Monitor 授权问题漏洞
Vulnerability Description
Siemens SINEC Security Monitor是德国西门子（Siemens）公司的一个工业安防监控器。 Siemens SINEC Security Monitor V4.10.0之前版本存在授权问题漏洞，该漏洞源于ssmctl-client命令中file_transfer功能缺少授权检查，可能导致任意文件读写。
CVSS Information
N/A
Vulnerability Type
N/A