Siemens SINEC Traffic Analyzer

🗓️ 13 Aug 2024 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 23 Views

Siemens SINEC Traffic Analyzer security vulnerabilities, no longer updating ICS advisories, improper privilege management, excessive authentication attempts, improper access control, sensitive information in cache

Reporter	Title	Published	Views	Family All 48
BDU FSTEC	The vulnerability of the software for monitoring and analyzing network traffic in industrial networks, SINEC Traffic Analyzer, arises from the lack of access control over files. This allows a hacker to modify the file system of the container.	15 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for monitoring and analyzing network traffic in industrial networks, SINEC Traffic Analyzer, is related to deficiencies in access control. This vulnerability allows a intruder to gain unauthorized access to protected information.	15 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the web server used by the monitoring and network traffic analysis software in SINEC Traffic Analyzer allows a hacker to access confidential information.	15 Nov 202400:00	–	bdu_fstec
Circl	CVE-2024-41903	13 Aug 202411:15	–	circl
Circl	CVE-2024-41904	13 Aug 202411:15	–	circl
Circl	CVE-2024-41905	13 Aug 202411:15	–	circl
Circl	CVE-2024-41906	13 Aug 202411:15	–	circl
Circl	CVE-2024-41907	13 Aug 202411:15	–	circl
CNVD	Siemens SINEC Traffic Analyzer Logic Flaw Vulnerability (CNVD-2024-35430)	14 Aug 202400:00	–	cnvd
CNVD	Siemens SINEC Traffic Analyzer Information Disclosure Vulnerability	14 Aug 202400:00	–	cnvd

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-716317.json
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-716317.html
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-228-04.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-228-04
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

13 Aug 2024 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5

CVSS 48.7

EPSS0.00594

SSVC