CVE-2025-13483CWE-306
CVE-2025-13483
published November 25, 2025
What it is
SiRcom SMART Alert (SiSA) allows unauthorized access to backend APIs. This allows an unauthenticated attacker to bypass the login screen using browser developer tools, gaining access to restricted parts of the application.
The record
Technical detail
- CVSS
- 8.8 · NONE
- CVSS v4.0
- Not supplied
- EPSS
- 0.00350 · 27.5th percentile
- Weakness
- CWE-306 · Missing Authentication for Critical Function
- Published
- 2025-11-25T23:15Z
References (1)
EPSS history
Timeline