PT-2025-48047 · Sircom · Sircom Smart Alert

Souvik Kandar · Published 2025-11-25 · Updated 2025-11-25 · CVE-2025-13483

Positive Technologies (AI Summary)

CVSS v4.0

8.8

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions SiRcom SMART Alert (SiSA) (affected versions not specified)

Description The SiRcom SMART Alert (SiSA) application permits unauthorized access to backend APIs. An unauthenticated attacker can circumvent the login process by utilizing browser developer tools, thereby gaining access to restricted application areas. The affected APIs allow bypassing the login screen.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-13483

Affected Products

Sircom Smart Alert

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-13483 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-13483 · Security Note
• https://t.me/CVEtracker/38193 · Telegram Post
• https://twitter.com/CVEnew/status/1993377618004197534 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1993442861757382695 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-329-06 · Note