CVE-2025-40768

CWE-200 — Information ExposureCWE-908 — Use of Uninitialized Resource4 documents4 sources
Severity
7.0HIGH
EPSS
0.0%
top 94.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Siemens Sinec Traffic Analyzer
Timeline
PublishedAug 12

Description

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application exposes an internal service port to be accessible from outside the system. This could allow an unauthorized attacker to access the application.

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-83mf-9hgj-gcjq: A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3↗2025-08-12
▶
CVEList
CVE-2025-40768: A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3↗2025-08-12
▶

📋Vendor Advisories

1
Microsoft
drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case.↗2022-09-13
▶