CVE-2024-41906 MEDIUM

CVE-2024-41906

Vendor Siemens
Product SINEC Traffic Analyzer
Weakness CWE-524
Published August 13, 2024
Last update August 14, 2024
View on NVD All CVEs

CVSS base score

4.8/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application does not properly handle cacheable HTTP responses in the web service. This could allow an attacker to read and modify data stored in the local cache.

Key dates

02Disclosure timeline

August 13, 2024 CVE published
August 14, 2024 Record updated