Lucene search
HistoryJun 11, 2024 - 12:15 p.m.
CVE-2024-35212
vulnerability
sinec traffic analyzer
input validation
database entries
cve-2024-35212
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
32.8%
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected application lacks input validation due to which an attacker can gain access to the Database entries.
Affected configurations
Node
siemenssinec_traffic_analyzerRange<1.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| siemens | sinec_traffic_analyzer | * | cpe:2.3:a:siemens:sinec_traffic_analyzer:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2024-35212
2024-06-11 11:15:54
cve
cve
CVE-2024-35212
2024-06-11 12:15:17
vulnrichment
vulnrichment
CVE-2024-35212
2024-06-11 11:15:54
ics
ics
Siemens SINEC Traffic Analyzer
2024-06-13 12:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
32.8%
Related for NVD:CVE-2024-35212