A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected web server, after a successful login, sets the session cookie on the browser, without applying any security attributes (such as “Secure”, “HttpOnly”, or “SameSite”).
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-196737.html | Patch Vendor Advisory |
| https://cert-portal.siemens.com/productcert/html/ssa-196737.html | Patch Vendor Advisory |
Configurations
History
11 Feb 2025, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CWE |
06 Aug 2024, 15:10
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://cert-portal.siemens.com/productcert/html/ssa-196737.html - Patch, Vendor Advisory | |
| First Time |
Siemens sinec Traffic Analyzer
Siemens |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| CPE | cpe:2.3:a:siemens:sinec_traffic_analyzer:*:*:*:*:*:*:*:* |
11 Jun 2024, 13:54
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-11 12:15
Updated : 2025-02-11 11:15
NVD link : CVE-2024-35211
Mitre link : CVE-2024-35211
JSON object : View
Products Affected
siemens
- sinec_traffic_analyzer
CWE
No CWE.