SSA-196737: Multiple Vulnerabilities in SINEC Traffic Analyzer Before V1.2
view advisory published 2024-06-11
SINEC Traffic Analyzer before V1.2 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC Traffic Analyzer and recommends to update to the latest version.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-35212US | — | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected application lacks input validation due to which an attacker c… | ||||
| CVE-2024-35211US | — | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected web server, after a successful login, sets the session cookie… | ||||
| CVE-2024-35210US | —OT elevated | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected web server is not enforcing HSTS. This could allow an attacke… | ||||
| CVE-2024-35209US | — | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected web server is allowing HTTP methods like PUT and Delete. This… | ||||
| CVE-2024-35208US | medium5.5 | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected web server stored the password in cleartext. This could allow… | ||||
| CVE-2024-35207US | high7.8 | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The web interface of the affected devices are vulnerable to Cross-Site Req… | ||||
| CVE-2024-35206US | — | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected application does not expire the session. This could allow an… | ||||
| CVE-2022-41742US | high7.1 | — | ||
NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnera… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (8)
- FixedSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V1.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954887/ - FixedSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V1.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954887/ - FixedSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V1.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954887/ - FixedSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V1.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954887/ - FixedSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V1.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954887/ - FixedSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V1.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954887/ - FixedSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V1.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954887/ - FixedSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V1.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954887/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan