Siemens SINEC Traffic Analyzer

Summary

Vulnerabilities 8

• High 7.8
  CVE-2024-35207

  A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The web inter…

  Siemens SINEC Traffic Analyzer ICS / OT
  Jun 11, 2024
• High 7.7
  CVE-2024-35206

  A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected …

  Siemens SINEC Traffic Analyzer ICS / OT
  Jun 11, 2024
• High 7.1
  CVE-2022-41742

  NGINX ngx_http_mp4_module vulnerability CVE-2022-41742

  NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to c…

  F5 NGINX Plus NGINX Open Source Subscription NGINX Network devices Debian Ubuntu Azure Linux Alpine
  Oct 19, 2022
• Medium 6.3
  CVE-2024-35208

  A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected …

  Siemens SINEC Traffic Analyzer ICS / OT
  Jun 11, 2024
• Medium 6.2
  CVE-2024-35209

  A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected …

  Siemens SINEC Traffic Analyzer ICS / OT
  Jun 11, 2024
• Medium 6.2
  CVE-2024-35212

  A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected …

  Siemens SINEC Traffic Analyzer ICS / OT
  Jun 11, 2024
• Medium 5.5
  CVE-2024-35211

  A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected …

  Siemens SINEC Traffic Analyzer ICS / OT
  Jun 11, 2024
• Medium 5.1
  CVE-2024-35210

  A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected …

  Siemens SINEC Traffic Analyzer ICS / OT
  Jun 11, 2024

Revision history

1. 2025-05-06 #3

   Revision - Fixing typos

2. 2025-02-11 #2

   Updated the cvss vector

3. 2024-06-11 #1

   Publication Date

References

• SSA-196737: Multiple Vulnerabilities in SINEC Traffic Analyzer Before V1.2 - HTML Version
  https://cert-portal.siemens.com/productcert/html/ssa-196737.html
• ICS Advisory ICSA-24-165-13 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-13
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B