Siemens SINEC Traffic Analyzer
SINEC Traffic Analyzer before V3.0 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC Traffic Analyzer and recommends to update to the latest version. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40770US | high7.0 | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions). The affected application uses a monitoring interface that is not operating in a s… | ||||
| CVE-2025-40769US | — | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application uses a Content Security Policy that allows unsafe… | ||||
| CVE-2025-40768US | high7.8 | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application exposes an internal service port to be accessible… | ||||
| CVE-2025-40767US | high7.8 | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application runs docker containers without adequate security… | ||||
| CVE-2025-40766US | — | Exploit | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application runs docker containers without adequate resource… | ||||
| CVE-2024-24990US | high7.5 | — | ||
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate.
Note: The HTTP/3 QUIC module is not… | ||||
| CVE-2024-24989US | high7.5 | — | ||
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate.
Note: The HTTP/3 QUIC module is not… | ||||
references
External citations — patches, advisories, analysis.
- SSA-517338: Multiple Vulnerabilities in SINEC Traffic Analyzer Before V3.0 - CSAF Versionself
- SSA-517338: Multiple Vulnerabilities in SINEC Traffic Analyzer Before V3.0 - HTML Versionself
- ICS Advisory ICSA-25-226-17 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-226-17 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (7)
- No fix availableSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Currently no fix is available
- FixedSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987676/ - FixedSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987676/ - FixedSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987676/ - FixedSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987676/ - FixedSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987676/ - FixedSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987676/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan