What’s Vulnerable › Vulnerabilities

CVE-2025-13483: Missing Authentication for Critical Function in SiRcom SMART Alert (SiSA)

• Severity: high (CVSS 8.8 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-25 · updated 2026-10-18
• Weakness: CWE-306

Description

SiRcom SMART Alert (SiSA) allows unauthorized access to backend APIs. This allows an unauthenticated attacker to bypass the login screen using browser developer tools, gaining access to restricted parts of the application.

Affected products

• SiRcom SMART Alert (SiSA: 3.0.48

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-06

Get alerted when CVE-2025-13483 or the next vulnerability affects your stack