SSA-517338: Multiple Vulnerabilities in SINEC Traffic Analyzer Before V3.0
SINEC Traffic Analyzer before V3.0 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC Traffic Analyzer and recommends to update to the latest version. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40770US | high7.0 | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions). The affected application uses a monitoring interface that is not operating in a s… | ||||
| CVE-2025-40769US | — | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application uses a Content Security Policy that allows unsafe… | ||||
| CVE-2025-40768US | high7.8 | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application exposes an internal service port to be accessible… | ||||
| CVE-2025-40767US | high7.8 | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application runs docker containers without adequate security… | ||||
| CVE-2025-40766US | — | Exploit | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application runs docker containers without adequate resource… | ||||
| CVE-2024-24990US | high7.5 | — | ||
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate.
Note: The HTTP/3 QUIC module is not… | ||||
| CVE-2024-24989US | high7.5 | — | ||
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate.
Note: The HTTP/3 QUIC module is not… | ||||
references
External citations — patches, advisories, analysis.
remediations (7)
- No fix availableSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Currently no fix is available
- FixedSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987676/ - FixedSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987676/ - FixedSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987676/ - FixedSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987676/ - FixedSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987676/ - FixedSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987676/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan