CVE-2024-35207: Siemens Sinec Traffic Analyzer

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The web interface of the affected devices are vulnerable to Cross-Site Request Forgery(CSRF) attacks. By tricking an authenticated victim user to click a malicious link, an attacker could perform arbitrary actions on the device on behalf of the victim user.

Affected products

• Siemens Sinec Traffic Analyzer: before 1.2 (fixed in 1.2)

Published 2024-06-11. Last modified 2026-06-17.