SINEC Traffic Analyzer vulnerabilities
11 known vulnerabilities in SINEC Traffic Analyzer from Siemens. 11 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.0 High severity
SINEC Traffic Analyzer: Channel Accessible by Non-Endpoint
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions). The affected application uses a monitoring interface that is not operating in a strictly passive mode. This could allow an attacker to interact with the interfac
- 7.4 High severity
SINEC Traffic Analyzer: Irrelevant Code
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application uses a Content Security Policy that allows unsafe script execution methods. This could allow an attacker to execute unauthorized
- 7.8 High severity
SINEC Traffic Analyzer: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application exposes an internal service port to be accessible from outside the system. This could allow an unauthorized attacker to access th
- 7.8 High severity
SINEC Traffic Analyzer: Execution with Unnecessary Privileges
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application runs docker containers without adequate security controls to enforce isolation. This could allow an attacker to gain elevated acc
- 7.5 High severity
SINEC Traffic Analyzer: Improper Restriction of Excessive Authentication Attempts
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application do not properly enforce restriction of excessive authentication attempts. This could allow an unauthenticated attacker to conduct
- 7.2 High severity
SINEC Traffic Analyzer: Improper Privilege Management
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application mounts the container's root filesystem with read and write privileges. This could allow an attacker to alter the container's file
- 7.5 High severity
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All…
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected application lacks input validation due to which an attacker can gain access to the Database entries.
- 7.5 High severity
SINEC Traffic Analyzer: Cleartext Transmission of Sensitive Information
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected web server is not enforcing HSTS. This could allow an attacker to perform downgrade attacks exposing confidential information.
- 7.5 High severity
SINEC Traffic Analyzer: Exposed Dangerous Method or Function
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected web server is allowing HTTP methods like PUT and Delete. This could allow an attacker to modify unauthorized files.
- 7.8 High severity
SINEC Traffic Analyzer: Cross-Site Request Forgery
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The web interface of the affected devices are vulnerable to Cross-Site Request Forgery(CSRF) attacks. By tricking an authenticated victim user to click a
- 8.8 High severity
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All…
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected application does not expire the session. This could allow an attacker to get unauthorized access.