Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: Siemens SINEC INS V1.0 SP2 Update 3 Clear all filters
TI-2024-31306 CVE-2024-46894 · GHSA-mx5f-vqxg-86w4

Information disclosure in Siemens SINEC INS

Priority LOW 30

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3).

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00269 Published 2024-11-12 Fixed in V1.0 SP2 Update 3 CWE-200
TI-2024-31305 CVE-2024-46892 · GHSA-76f5-r74w-9h63

Insufficient session expiration in Siemens SINEC INS

Priority LOW 30

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3).

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00296 Published 2024-11-12 Fixed in V1.0 SP2 Update 3 CWE-613
TI-2024-31304 CVE-2024-46891 · GHSA-775q-3335-qhjr

Uncontrolled resource consumption in Siemens SINEC INS

Priority LOW 37

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3).

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0052 Published 2024-11-12 Fixed in V1.0 SP2 Update 3 CWE-400
TI-2024-31303 CVE-2024-46890 · GHSA-gh66-hfff-5mf9

OS command injection in Siemens SINEC INS

Priority MEDIUM 42

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3).

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.00742 Published 2024-11-12 Fixed in V1.0 SP2 Update 3 CWE-78
TI-2024-31301 CVE-2024-46888 · GHSA-qf2g-86hc-xp38

Path traversal in Siemens SINEC INS

Priority MEDIUM 42

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3).

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00916 Published 2024-11-12 Fixed in V1.0 SP2 Update 3 CWE-22