Siemens SINEC INS
SINEC INS before V1.0 SP2 Update 3 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC INS and recommends to update to the latest version.
describes (59)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-27980US | — | — | ||
Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execu… | ||||
| CVE-2024-4741US | — | — | ||
Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause
memory to be accessed that was previously freed in some situations
Impact summary: A use after free can… | ||||
| CVE-2024-46894US | medium5.4OT elevated | — | ||
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly validate authorization of a user to query the "/api/… | ||||
| CVE-2024-46892US | high8.1 | — | ||
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly invalidate sessions when the associated user is dele… | ||||
| CVE-2024-46891US | high7.5 | — | ||
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly restrict the size of generated log files. This could… | ||||
| CVE-2024-46890US | — | — | ||
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly validate input sent to specific endpoints of its web… | ||||
| CVE-2024-46889US | —OT elevated | — | ||
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application uses hard-coded cryptographic key material to obfuscate configuration… | ||||
| CVE-2024-46888US | critical9.9 | — | ||
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly sanitize user provided paths for SFTP-based file up-… | ||||
| CVE-2023-46809US | — | — | ||
Node.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked version of OpenSSL which are unpatched are vulnerable to the Marvin Attack - https… | ||||
| CVE-2023-39333US | — | — | ||
Maliciously crafted export names in an imported WebAssembly module can inject JavaScript code. The injected code may be able to access data and functions that the WebAssembly modul… | ||||
| CVE-2024-5535US | — | Exploit | ||
Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an
empty supported client protocols buffer may cause a crash or memory contents to
be sent to the peer.… | ||||
| CVE-2024-27982US | — | — | ||
The team has identified a critical vulnerability in the http server of the most recent version of Node, where malformed headers can lead to HTTP request smuggling. Specifically, if… | ||||
| CVE-2023-6237US | — | — | ||
Issue summary: Checking excessively long invalid RSA public keys may take
a long time.
Impact summary: Applications that use the function EVP_PKEY_public_check()
to check RSA publ… | ||||
| CVE-2024-27983US | — | Exploit | ||
An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packets with a few HTTP/2 frames inside. It is possible to leave so… | ||||
| CVE-2024-2511US | — | — | ||
Issue summary: Some non-default TLS server configurations can cause unbounded
memory growth when processing TLSv1.3 sessions
Impact summary: An attacker may exploit certain server… | ||||
| CVE-2024-22025US | — | — | ||
A vulnerability in Node.js has been identified, allowing for a Denial of Service (DoS) attack through resource exhaustion when using the fetch() function to retrieve content from a… | ||||
| CVE-2024-22017US | — | Exploit | ||
setuid() does not affect libuv's internal io_uring operations if initialized before the call to setuid().
This allows the process to perform privileged operations despite presumabl… | ||||
| CVE-2024-22019US | high7.5 | — | ||
A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP request with chunked encoding, leading to resource exhaustion and denial of service (DoS… | ||||
| CVE-2024-21896US | critical9.8 | — | ||
The permission model protects itself against path traversal attacks by calling path.resolve() on any paths given by the user. If the path is to be treated as a Buffer, the implemen… | ||||
| CVE-2024-21892US | high7.8 | — | ||
On Linux, Node.js ignores certain environment variables if those may have been set by an unprivileged user while the process is running with elevated privileges with the only excep… | ||||
references
External citations — patches, advisories, analysis.
- SSA-915275: Multiple Vulnerabilities in SINEC INS Before V1.0 SP2 Update 3 - CSAF Versionself
- SSA-915275: Multiple Vulnerabilities in SINEC INS Before V1.0 SP2 Update 3 - HTML Versionself
- ICS Advisory ICSA-24-319-08 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-319-08 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (59)
- FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/ - FixedSINEC INS
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan