Skip to content
fr Sign in
9.9 Critical

CVE-2024-46888 A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3)

Description

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly sanitize user provided paths for SFTP-based file up- and downloads. This could allow an authenticated remote attacker to manipulate arbitrary files on the filesystem and achieve arbitrary code execution on the device.

Affected products and versions

Product Affected versions Fixed in
SINEC INS Versions not published
sinec_ins Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SINEC INS

The 21 CVEs of SINEC INS →
CVE-2026-46749 A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6) 7.5 High CVE-2026-46748 A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6) 8.8 High CVE-2026-46747 A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6) 4.3 Medium CVE-2026-46746 A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6) 8.8 High
Track this CVE