CVE-2024-41906 PUBLISHED CVSS 4.800000190734863 MEDIUM

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application does not properly handle cacheable HTTP responses in the web service. This could allow an attacker to read and modify data stored in the local cache.

EPSS 0.36% · 57.6th percentile

Risk Scores

CVSS v3.1
4.800000190734863
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS Score
0.36%
57.6th percentile

Affected Products

VendorProductVersions
SiemensSINEC Traffic Analyzer0
siemenssinec_traffic_analyzer0

Timeline

References

Open in Interactive Console →