A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The web interface of the affected devices are vulnerable to Cross-Site Request Forgery(CSRF) attacks. By tricking an authenticated victim user to click a malicious link, an attacker could perform arbitrary actions on the device on behalf of the victim user.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-196737.html | Patch Vendor Advisory |
Configurations
History
06 Aug 2024, 15:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://cert-portal.siemens.com/productcert/html/ssa-196737.html - Patch, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CPE | cpe:2.3:a:siemens:sinec_traffic_analyzer:*:*:*:*:*:*:*:* | |
| First Time |
Siemens sinec Traffic Analyzer
Siemens |
11 Jun 2024, 13:54
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-11 12:15
Updated : 2024-08-06 15:02
NVD link : CVE-2024-35207
Mitre link : CVE-2024-35207
JSON object : View
Products Affected
siemens
- sinec_traffic_analyzer
CWE
CWE-352
Cross-Site Request Forgery (CSRF)