Siemens Insights Hub Private Cloud
Insights Hub Private Cloud is affected by multiple vulnerabilities in Ingress NGINX Controller for Kubernetes. These vulnerabilities could lead to arbitrary code execution in the context of the ingress-nginx controller, or disclosure of Secrets accessible to the controller, or denial of service condition. Siemens has released a new version for Insights Hub Private Cloud and recommends to update to the latest version.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-24514US | — | Exploit | ||
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingress annotation can be used to inject configuration into ngin… | ||||
| CVE-2025-24513US | — | — | ||
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where attacker-provided data are included in a filename by the ingress-nginx Admissio… | ||||
| CVE-2025-1974US | — | Exploit | ||
A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the… | ||||
| CVE-2025-1098US | — | Exploit | ||
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `mirror-target` and `mirror-host` Ingress annotations can be used to inject… | ||||
| CVE-2025-1097US | — | Exploit | ||
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-cn` Ingress annotation can be used to inject configuration… | ||||
references
External citations — patches, advisories, analysis.
- SSA-817234: Multiple Kubernetes Ingress NGINX Controller Vulnerabilities in Insights Hub Private Cloud - CSAF Versionself
- SSA-817234: Multiple Kubernetes Ingress NGINX Controller Vulnerabilities in Insights Hub Private Cloud - HTML Versionself
- ICS Advisory ICSA-25-100-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-100-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (5)
- FixedInsights Hub Private Cloud
Contact customer support to receive patch and update information
- FixedInsights Hub Private Cloud
Contact customer support to receive patch and update information
- FixedInsights Hub Private Cloud
Contact customer support to receive patch and update information
- FixedInsights Hub Private Cloud
Contact customer support to receive patch and update information
- FixedInsights Hub Private Cloud
Contact customer support to receive patch and update information
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan