7.8
Élevée
CVE-2024-35207 A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2)
Description
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The web interface of the affected devices are vulnerable to Cross-Site Request Forgery(CSRF) attacks. By tricking an authenticated victim user to click a malicious link, an attacker could perform arbitrary actions on the device on behalf of the victim user.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SINEC Traffic Analyzer 1.2 | premières → < 1.2 | 1.2 |
| sinec_traffic_analyzer 1.2 | premières → < 1.2 | 1.2 |
Références
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de SINEC Traffic Analyzer
Les 17 CVE de SINEC Traffic Analyzer →
CVE-2025-40770
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions)
7.4
Élevée
CVE-2025-40769
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0)
7.4
Élevée
CVE-2025-40768
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0)
7.3
Élevée
CVE-2025-40767
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0)
7.8
Élevée