SB2024081443 - Multiple vulnerability in Siemens SINEC Traffic Analyzer

Description

This security bulletin contains information about 5 secuirty vulnerabilities.

1) Improper privilege management (CVE-ID: CVE-2024-41903)

The vulnerability allows a remote user to escalate privileges.

The vulnerability exists due to improper privilege management. A remote administrator can alter the container's filesystem and escalate privileges.

2) Improper Restriction of Excessive Authentication Attempts (CVE-ID: CVE-2024-41904)

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to improper restriction of excessive authentication attempts. A remote attacker can conduct brute force attacks against legitimate user passwords.

3) Improper access control (CVE-ID: CVE-2024-41905)

The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions. A remote user can bypass implemented security restrictions and gain unauthorized access to sensitive information.

4) Use of cache containing sensitive information (CVE-ID: CVE-2024-41906)

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to the affected application does not properly handle cacheable HTTP responses in the web service. A remote attacker can read and modify data stored in the local cache.

5) Improperly implemented security check for standard (CVE-ID: CVE-2024-41907)

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to the the affected application is missing general HTTP security headers in the web server. A remote attacker can make the servers more prone to clickjacking.

Remediation

Install update from vendor's website.

References

• https://cert-portal.siemens.com/productcert/html/ssa-716317.html