Approved changes feed: RSS · Atom
cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Sinec Ins (a288376f-d511-5203-8f3d-8ad627dc8a24) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-46749 |
vulnerable | 2026-07-29 00:54:59.225843 |
Details available
HIGH (7.5)
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application uses a password hashing implementation with a static, hardcoded salt shared across all users and installations, and is configured with an insufficient number of iterations. This could allow an attacker to efficiently recover user passwords using brute-force or precomputed attacks, potentially resulting in unauthorized access.
Published: 2026-06-09T08:47:05.354Z
Updated: 2026-06-09T13:10:31.258Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-46748 |
vulnerable | 2026-07-29 00:54:59.225549 |
Details available
HIGH (8.8)
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected system includes a binary that is configured with the cap_dac_override capability. This capability allows the process to bypass file system permission checks, resulting in unrestricted file system access. This could allow a local attacker to escalate privileges leading to arbitrary file modification and gaining root privileges on the system.
Published: 2026-06-09T08:46:55.902Z
Updated: 2026-06-09T16:06:36.328Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-46747 |
vulnerable | 2026-07-29 00:54:59.225232 |
Details available
MEDIUM (4.3)
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application does not properly sanitize path input in the `GET /api/sftp/uploadFiles` endpoint used for directory listing. This allows path traversal through crafted input, enabling access to unintended file system locations.
Published: 2026-06-09T08:46:54.724Z
Updated: 2026-06-09T14:37:31.164Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-46746 |
vulnerable | 2026-07-29 00:54:59.224986 |
Details available
HIGH (8.8)
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The application does not properly sanitize user input in the /api/sftp/uploadFiles endpoint, allowing the injection of shell command payloads via crafted directory names. These payloads are stored and executed when directory listings are retrieved. This could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system with the privileges of the affected service user (sinecins).
Published: 2026-06-09T08:46:53.639Z
Updated: 2026-06-09T15:12:58.585Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46894 |
vulnerable | 2026-06-08 06:48:10.793635 |
Details available
MEDIUM (6.3)
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly validate authorization of a user to query the "/api/sftp/users" endpoint. This could allow an authenticated remote attacker to gain knowledge about the list of configured users of the SFTP service and also modify that configuration.
Published: 2024-11-12T12:49:45.831Z
Updated: 2024-11-12T14:19:46.429Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46892 |
vulnerable | 2026-06-08 06:48:10.790824 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46891 |
vulnerable | 2026-06-08 06:48:10.787472 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46890 |
vulnerable | 2026-06-08 06:48:10.786713 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46889 |
vulnerable | 2026-06-08 06:48:10.785973 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46888 |
vulnerable | 2026-06-08 06:48:10.781537 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3596 |
vulnerable | 2026-06-08 06:43:50.881524 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48431 |
vulnerable | 2026-06-08 06:14:27.203596 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48430 |
vulnerable | 2026-06-08 06:14:27.203030 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48429 |
vulnerable | 2026-06-08 06:14:27.202249 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48428 |
vulnerable | 2026-06-08 06:14:27.201594 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48427 |
vulnerable | 2026-06-08 06:14:27.197560 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-44487 |
vulnerable | 2026-06-08 06:12:41.435004 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45094 |
vulnerable | 2026-06-08 05:50:35.607723 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45093 |
vulnerable | 2026-06-08 05:50:35.607139 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45092 |
vulnerable | 2026-06-08 05:50:35.604085 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35256 |
vulnerable | 2026-06-08 05:46:04.430419 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35255 |
vulnerable | 2026-06-08 05:46:04.424324 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32222 |
vulnerable | 2026-06-08 05:44:42.757992 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32212 |
vulnerable | 2026-06-08 05:44:42.737422 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2097 |
vulnerable | 2026-06-08 05:42:50.268341 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2068 |
vulnerable | 2026-06-08 05:42:50.186408 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0778 |
vulnerable | 2026-06-08 05:39:11.122169 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0396 |
vulnerable | 2026-06-08 05:39:09.962950 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0235 |
vulnerable | 2026-06-08 05:39:09.583083 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0155 |
vulnerable | 2026-06-08 05:39:09.352031 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-4160 |
vulnerable | 2026-06-08 05:38:08.575380 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3749 |
vulnerable | 2026-06-08 05:33:53.921318 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25220 |
vulnerable | 2026-06-08 05:30:40.357831 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25217 |
vulnerable | 2026-06-08 05:30:40.326418 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23841 |
vulnerable | 2026-06-08 05:30:03.126311 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23839 |
vulnerable | 2026-06-08 05:30:03.095654 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23337 |
vulnerable | 2026-06-08 05:30:02.727897 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22945 |
vulnerable | 2026-06-08 05:30:01.993844 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7793 |
vulnerable | 2026-06-08 05:27:14.275963 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28500 |
vulnerable | 2026-06-08 05:23:56.202464 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28168 |
vulnerable | 2026-06-08 05:23:53.826887 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.