CVE-2024-41906

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application does not properly handle cacheable HTTP responses in the web service. This could allow an attacker to read and modify data stored in the local cache.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - productcert@siemens.com

Published

2024-08-13

Last modified

2024-08-14

Weaknesses

CWE-524

Affected products

• Sinec Traffic Analyzer (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-716317.html