Siemens Sinec Traffic Analyzer vulnerabilities

17 CVEs affecting Siemens Sinec Traffic Analyzer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-40770, published 2025-08-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-41904, published 2024-08-13. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application do not properly enforce restriction of excessive authentication…
CVE-2024-41903, published 2024-08-13. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application mounts the container's root filesystem with read and write…
CVE-2024-35212, published 2024-06-11. Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected application lacks input validation due to which an attacker can gain access to…
CVE-2024-35206, published 2024-06-11. High severity, CVSS 7.7. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected application does not expire the session. This could allow an attacker to get…
CVE-2024-35209, published 2024-06-11. Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected web server is allowing HTTP methods like PUT and Delete. This could allow an…
CVE-2024-41905, published 2024-08-13. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application do not have access control for accessing the files. This could allow…
CVE-2024-41906, published 2024-08-13. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application does not properly handle cacheable HTTP responses in the web…
CVE-2024-41907, published 2024-08-13. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application is missing general HTTP security headers in the web server. This…
CVE-2024-35211, published 2024-06-11. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected web server, after a successful login, sets the session cookie on the browser,…
CVE-2025-40766, published 2025-08-12. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application runs docker containers without adequate resource and security…

Latest

CVE-2025-40770, published 2025-08-12. High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions). The affected application uses a monitoring interface that is not operating in a strictly passive…
CVE-2025-40769, published 2025-08-12. High severity, CVSS 7.4. EPSS: 0.1% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application uses a Content Security Policy that allows unsafe script execution…
CVE-2025-40768, published 2025-08-12. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application exposes an internal service port to be accessible from outside the…
CVE-2025-40767, published 2025-08-12. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application runs docker containers without adequate security controls to enforce…