CVE-2025-13483

Missing Authentication for Critical Function in SiRcom SMART Alert (SiSA)

CVSS 8.8 HIGHEPSS 0.3%CWE-306

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 8.8EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

25 nov 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

SiRcom SMART Alert (SiSA) allows unauthorized access to backend APIs. This allows an unauthenticated attacker to bypass the login screen using browser developer tools, gaining access to restricted parts of the application.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Productos afectados

SiRcom · SMART Alert (SiSA

Referencias

https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-06