SSA-517338: Multiple Vulnerabilities in SINEC Traffic Analyzer Before V3.0
SINEC Traffic Analyzer before V3.0 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC Traffic Analyzer and recommends to update to the latest version. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-40770US | high7.0 | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions). The affected application uses a monitoring interface that is not operating in a s… | ||||
| CVE-2025-40769US | — | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application uses a Content Security Policy that allows unsafe… | ||||
| CVE-2025-40768US | high7.8 | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application exposes an internal service port to be accessible… | ||||
| CVE-2025-40767US | high7.8 | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application runs docker containers without adequate security… | ||||
| CVE-2025-40766US | — | Exploit | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application runs docker containers without adequate resource… | ||||
| CVE-2024-24990US | high7.5 | — | ||
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate.
Note: The HTTP/3 QUIC module is not… | ||||
| CVE-2024-24989US | high7.5 | — | ||
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate.
Note: The HTTP/3 QUIC module is not… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (7)
- Kein Fix verfügbarSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Currently no fix is available
- BehobenSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987676/ - BehobenSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987676/ - BehobenSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987676/ - BehobenSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987676/ - BehobenSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987676/ - BehobenSINEC Traffic Analyzer (6GK8822-1BG01-0BA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987676/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan