CVE-2024-46891 — Vulnetix

Try Vulnetix Request Demo

CVE-2024-46891 PUBLISHED CVSS 5.300000190734863 MEDIUM

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly restrict the size of generated log files. This could allow an unauthenticated remote attacker to trigger a large amount of logged events to exhaust the system's resources and create a denial of service condition.

EPSS 1.07% · 77.6th percentile

Risk Scores

CVSS v3.1

5.300000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

EPSS Score

1.07%

77.6th percentile

Affected Products

Vendor	Product	Versions
seimens	sinec_ins	0
Siemens	SINEC INS	0
siemens	sinec_ins	1.0, 1.0, 1.0

Timeline

Nov 12, 2024 Coalition ESS Score
Nov 12, 2024 CVE Published
Nov 12, 2024 PoC Published
Nov 12, 2024 PoC Published
Nov 12, 2024 CVE Updated
Nov 13, 2024 EPSS Score
Nov 14, 2024 PoC Published
Nov 30, 2024 EPSS Score
Dec 18, 2024 EPSS Score
Jan 4, 2025 EPSS Score
Jan 21, 2025 EPSS Score
Feb 8, 2025 EPSS Score

References

Open in Interactive Console →