sinec_ins vulnerabilities
3 known vulnerabilities in sinec_ins from Seimens. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
SINEC INS: Uncontrolled Resource Consumption
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly restrict the size of generated log files. This could allow an unauthenticated remote attacker to trigger a large amount of logged ev
- 9.1 Critical severity
SINEC INS: Improper Neutralization of Special Elements used in an OS Command
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly validate input sent to specific endpoints of its web API. This could allow an authenticated remote attacker with high privileges on
- 9.9 Critical severity
SINEC INS: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly sanitize user provided paths for SFTP-based file up- and downloads. This could allow an authenticated remote attacker to manipulate