CVE-2025-40769 PUBLISHED CVSS 7.400000095367432 HIGH

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application uses a Content Security Policy that allows unsafe script execution methods. This could allow an attacker to execute unauthorized scripts, potentially leading to cross-site scripting attacks.

EPSS 0.02% · 4.6th percentile

Risk Scores

CVSS v3.1
7.400000095367432
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.02%
4.6th percentile

Affected Products

VendorProductVersions
SiemensSINEC Traffic Analyzer0

Timeline

References

Open in Interactive Console →