Siemens SINEC Traffic Analyzer
Advisory ansehen veröffentlicht 2024-06-11
SINEC Traffic Analyzer before V1.2 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC Traffic Analyzer and recommends to update to the latest version.
01
beschreibt (8)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-35212US | — | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected application lacks input validation due to which an attacker c… | ||||
| CVE-2024-35211US | — | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected web server, after a successful login, sets the session cookie… | ||||
| CVE-2024-35210US | —OT erhöht | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected web server is not enforcing HSTS. This could allow an attacke… | ||||
| CVE-2024-35209US | — | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected web server is allowing HTTP methods like PUT and Delete. This… | ||||
| CVE-2024-35208US | medium5.5 | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected web server stored the password in cleartext. This could allow… | ||||
| CVE-2024-35207US | high7.8 | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The web interface of the affected devices are vulnerable to Cross-Site Req… | ||||
| CVE-2024-35206US | — | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected application does not expire the session. This could allow an… | ||||
| CVE-2022-41742US | high7.1 | — | ||
NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnera… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-196737: Multiple Vulnerabilities in SINEC Traffic Analyzer Before V1.2 - CSAF Versionself
- SSA-196737: Multiple Vulnerabilities in SINEC Traffic Analyzer Before V1.2 - HTML Versionself
- ICS Advisory ICSA-24-165-13 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-165-13 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (8)
- BehobenSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V1.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954887/ - BehobenSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V1.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954887/ - BehobenSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V1.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954887/ - BehobenSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V1.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954887/ - BehobenSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V1.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954887/ - BehobenSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V1.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954887/ - BehobenSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V1.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954887/ - BehobenSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V1.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954887/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan