CVE-2024-41906

6.3 mediumEPSS 0.2%

Medium (6.3) in siemens sinec traffic analyzer. EPSS 0.2% chance of exploitation in the next 30 days.

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application does not properly handle cacheable HTTP responses in the web service. This could allow an attacker to read and modify data stored in the local cache.

Severity

CVSS 4.0

6.3 medium

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-31)
CWE: CWE-524
Published: 2024-08-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

siemens:sinec_traffic_analyzer

References

https://cert-portal.siemens.com/productcert/html/ssa-716317.html

Check your stack JSON