Description
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application is missing general HTTP security headers in the web server. This could allow an attacker to make the servers more prone to clickjacking attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SINEC Traffic Analyzer | < V2.0 | V2.0 |
Advisories 3
- NCSC-2024-0332 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Aug 13, 2024
- ICSA-24-228-04 Siemens SINEC Traffic Analyzer CISA ICS & IT advisories · Aug 13, 2024
- SSA-716317 SSA-716317: Multiple Vulnerability in SINEC Traffic Analyzer Before V2.0 Siemens ProductCERT · Aug 13, 2024