VDB
BDU%3A2024-05087
BDU%3A2024-05087
PUBLISHED
CVSS 6.400000095367432 MEDIUM
Уязвимость механизма HSTS (HTTP Strict Transport Security) веб-сервера программного средства мониторинга и анализа сетевого трафика в промышленных сетях SINEC Traffic Analyzer, позволяющая нарушителю выполнить Downgrade-атаку (атака с понижением версии протокола)
Risk Scores
CVSS 2.0
6.400000095367432
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens AG | SINEC Traffic Analyzer |
Timeline
- Jul 5, 2024 CVE Published
References
- https://cert-portal.siemens.com/productcert/html/ssa-196737.html url
- https://github.com/advisories/GHSA-x8h6-96m2-gv4q url
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-13 url
- https://support.industry.siemens.com/cs/document/109954887/sales-delivery-release-of-sinec-traffic-analyzer-v1-2-?dti=0&lc=en-WW advisory