SSA-716317

csafDEsiemens_psirt

SSA-716317: Multiple Vulnerability in SINEC Traffic Analyzer Before V2.0

view advisory published 2024-08-13

SINEC Traffic Analyzer before V2.0 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC Traffic Analyzer and recommends to update to the latest version.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2024-41907USmedium5.4—
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application is missing general HTTP security headers in the w…
CVE-2024-41906USmedium6.5—
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application does not properly handle cacheable HTTP responses…
CVE-2024-41905USmedium6.5—
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application do not have access control for accessing the file…
CVE-2024-41904UShigh7.5—
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application do not properly enforce restriction of excessive…
CVE-2024-41903UShigh7.2—
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application mounts the container's root filesystem with read…
02

references

External citations — patches, advisories, analysis.

03

remediations (5)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan