Siemens SINEC Traffic Analyzer

🗓️ 12 Aug 2025 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 8 Views

Vulnerable SINEC Traffic Analyzer pre-V3.0; update; isolate networks; follow security; use VPN.

Reporter	Title	Published	Views	Family All 127
BDU FSTEC	The vulnerability of HTTP/3 QUIC modules in NGINX Plus and NGINX OSS web servers allows attackers to cause service interruptions.	15 Feb 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ngx_http_v3_module in NGINX and NGINX Plus servers allows a hacker to cause a service failure.	15 Feb 202400:00	–	bdu_fstec
BDU FSTEC	SINEC Traffic Analyzer’s network traffic in industrial networks is related to deficiencies in access control. This allows intruders to increase their privileges and gain unauthorized access to protected information.	8 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for monitoring and analyzing network traffic in industrial networks, SINEC Traffic Analyzer, arises from insufficient protection of operational data. This vulnerability allows attackers to gain unauthorized access to protected information.	15 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for monitoring and analyzing network traffic in industrial networks, SINEC Traffic Analyzer, arises from the ability to access the channel from a non-endpoint location, allowing attackers to carry out “man-in-the-middle” attacks.	15 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for monitoring and analyzing network traffic in industrial networks, SINEC Traffic Analyzer, is related to the presence of non-relevant code, which allows attackers to carry out XSS attacks.	15 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the monitoring and network traffic analysis software in industrial networks, SINEC Traffic Analyzer, arises from uncontrolled resource consumption, allowing attackers to cause service interruptions.	15 Oct 202500:00	–	bdu_fstec
FreeBSD	nginx-devel -- Multiple Vulnerabilities in HTTP/3	14 Feb 202400:00	–	freebsd
Chainguard	CVE-2024-24989 vulnerabilities	14 Feb 202417:15	–	cgr
Chainguard	CVE-2024-24990 vulnerabilities	14 Feb 202417:15	–	cgr

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-517338.json
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-517338.html
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-266-17.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-25-266-17
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

12 Aug 2025 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.8

CVSS 48.8

EPSS0.01061

SSVC

sinec traffic analyzer vulnerable pre version update latest version industrial security guidelines network isolation virtual private network product advisories