CVE-2024-41904

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application do not properly enforce restriction of excessive authentication attempts. This could allow an unauthenticated attacker to conduct brute force attacks against legitimate user credentials or keys.

Score

CVSS 4.0 8.7 High

Status

Analyzed - productcert@siemens.com

Published

2024-08-13

Last modified

2024-08-13

Weaknesses

CWE-307

Affected products

• Sinec Traffic Analyzer (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-716317.html