How severe is CVE-2024-47565?

CVE-2024-47565 has a CVSS 3.x base score of 4.3, rated medium severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is none, integrity low, and availability none.

Is CVE-2024-47565 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (29th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2024-47565?

CVE-2024-47565 affects Siemens Sinec Security Monitor. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2024-47565?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2024-47565 have an EU (EUVD) identifier?

Yes. CVE-2024-47565 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-42529.

When was CVE-2024-47565 published?

CVE-2024-47565 was published on 2024-10-08 and last updated on 2026-06-17.

CVE-2024-47565

CVE-2024-47565 is a medium-severity vulnerability in Siemens Sinec Security Monitor with a CVSS 3.x base score of 4.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-183.

Key facts

Severity: Medium (CVSS 3.x base score 4.3)
CVSS v4: 5.3
EPSS exploit prediction: 0% (29th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2024-42529
Weakness: CWE-183
Affected product: Siemens Sinec Security Monitor
Published: 2024-10-08
Last modified: 2026-06-17

Description

A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate that user input complies with a list of allowed values. This could allow an authenticated remote attacker to compromise the integrity of the configuration of the affected application.

Frequently asked questions

What is CVE-2024-47565?: A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate that user input complies with a list of allowed values. This could allow an authenticated remote attacker to compromise the integrity of the configuration of the affected application.
How severe is CVE-2024-47565?: CVE-2024-47565 has a CVSS 3.x base score of 4.3, rated medium severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is none, integrity low, and availability none.
Is CVE-2024-47565 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (29th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2024-47565?: CVE-2024-47565 affects Siemens Sinec Security Monitor. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2024-47565?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2024-47565 have an EU (EUVD) identifier?: Yes. CVE-2024-47565 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-42529.
When was CVE-2024-47565 published?: CVE-2024-47565 was published on 2024-10-08 and last updated on 2026-06-17.

References

https://cert-portal.siemens.com/productcert/html/ssa-430425.html

Affected products (1)

cpe:2.3:a:siemens:sinec_security_monitor:*:*:*:*:*:*:*:*

More vulnerabilities in Siemens Sinec Security Monitor

CVE-2024-47553 — Critical (CVSS 9.9): A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does…
CVE-2024-47562 — High (CVSS 8.8): A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does…
CVE-2025-40830 — Medium (CVSS 6.7): A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application does…
CVE-2025-40831 — Medium (CVSS 6.5): A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application lacks…
CVE-2024-47563 — Medium (CVSS 5.3): A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does…
CVE-2026-27661 — Medium (CVSS 4.3): A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application leaks…

All CVEs affecting Siemens Sinec Security Monitor →

Other CWE-183 vulnerabilities

CVE-2026-3490 — Critical (CVSS 10.0): picklescan before 1.0.4 fails to block pkgutil.resolve_name, allowing attackers to bypass the entire blocklist by…
CVE-2026-54316 — Critical (CVSS 9.1): Claude Code is an agentic coding tool. From 0.2.54 until 2.1.163, because the hostname huggingface.co was pre-approved…
CVE-2026-29514 — High (CVSS 8.8): NetBox versions 4.3.5 through 4.5.4 contain a remote code execution vulnerability in the…
CVE-2026-46391 — High (CVSS 8.7): HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 9.0.1 and prior to version…
CVE-2025-53762 — High (CVSS 8.7): Permissive list of allowed inputs in Microsoft Purview allows an authorized attacker to elevate privileges over a…
CVE-2026-41387 — High (CVSS 7.8): OpenClaw before 2026.3.22 contains an incomplete host environment variable sanitization vulnerability in…

Browse all CWE-183 vulnerabilities →