CVE-2024-47553

CVE-2024-47553 is a critical vulnerability affecting all versions of Siemens SINEC Security Monitor prior to V4.9.0, stemming from improper user input validation in the ssmctl-client command. This allows an authenticated, low-privileged remote attacker to execute arbitrary code with root privileges on the underlying operating system. With a CVSS score of 9.9, this vulnerability presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, and community discussion is minimal, its high FAUCET Risk Score of 82/100 indicates significant potential danger.