CVE-2024-41903

published 2024-08-13

CVE-2024-41903: A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application mounts the container's root…

high 7.5 CVSS 4.0

AV N AC H AT N PR H UI N VC H VI H VA H SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application mounts the container's root filesystem with read and write privileges. This could allow an attacker to alter the container's filesystem leading to unauthorized modifications and data corruption.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
siemens	sinec_traffic_analyzer	< V2.0	V2.0
siemens	sinec_traffic_analyzer	< 2.0	2.0

CWE-269