CVE-2024-35211: Siemens Sinec Traffic Analyzer

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected web server, after a successful login, sets the session cookie on the browser, without applying any security attributes (such as “Secure”, “HttpOnly”, or “SameSite”).

Affected products

• Siemens Sinec Traffic Analyzer: before 1.2 (fixed in 1.2)

Published 2024-06-11. Last modified 2026-06-17.