Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:sinec_ins:1.0:-:*:*:*:*:*:*

part: a version: 1.0 update: -

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSinec Ins (a288376f-d511-5203-8f3d-8ad627dc8a24)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-46892 vulnerable 2026-06-08 06:48:10.790866 db.gcve.eu details are currently unavailable. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46890 vulnerable 2026-06-08 06:48:10.786852 Details available
CRITICAL (9.1)
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly validate input sent to specific endpoints of its web API. This could allow an authenticated remote attacker with high privileges on the application to execute arbitrary code on the underlying OS.
Published: 2024-11-12T12:49:41.829Z
Updated: 2024-11-12T14:28:21.227Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46889 vulnerable 2026-06-08 06:48:10.786114 Details available
MEDIUM (5.3)
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application uses hard-coded cryptographic key material to obfuscate configuration files. This could allow an attacker to learn that cryptographic key material through reverse engineering of the application binary and decrypt arbitrary backup files.
Published: 2024-11-12T12:49:40.474Z
Updated: 2024-11-12T14:30:25.375Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46888 vulnerable 2026-06-08 06:48:10.782135 Details available
CRITICAL (9.9)
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly sanitize user provided paths for SFTP-based file up- and downloads. This could allow an authenticated remote attacker to manipulate arbitrary files on the filesystem and achieve arbitrary code execution on the device.
Published: 2024-11-12T12:49:39.127Z
Updated: 2024-11-12T14:32:11.296Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48431 vulnerable 2026-06-08 06:14:27.203630 Details available
MEDIUM (6.8)
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected software does not correctly validate the response received by an UMC server. An attacker can use this to crash the affected software by providing and configuring a malicious UMC server or by manipulating the traffic from a legitimate UMC server (i.e. leveraging CVE-2023-48427).
Published: 2023-12-12T11:27:23.326Z
Updated: 2024-08-02T21:30:35.087Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48430 vulnerable 2026-06-08 06:14:27.203173 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48429 vulnerable 2026-06-08 06:14:27.202403 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48428 vulnerable 2026-06-08 06:14:27.201634 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48427 vulnerable 2026-06-08 06:14:27.198605 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44487 vulnerable 2026-06-08 06:12:41.436109 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45094 vulnerable 2026-06-08 05:50:35.607837 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45093 vulnerable 2026-06-08 05:50:35.607189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45092 vulnerable 2026-06-08 05:50:35.605064 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35256 vulnerable 2026-06-08 05:46:04.430539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35255 vulnerable 2026-06-08 05:46:04.425396 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32222 vulnerable 2026-06-08 05:44:42.758112 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32215 vulnerable 2026-06-08 05:44:42.748744 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32213 vulnerable 2026-06-08 05:44:42.741690 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32212 vulnerable 2026-06-08 05:44:42.738522 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2097 vulnerable 2026-06-08 05:42:50.268754 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2068 vulnerable 2026-06-08 05:42:50.187117 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0396 vulnerable 2026-06-08 05:39:09.963061 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0235 vulnerable 2026-06-08 05:39:09.583111 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0155 vulnerable 2026-06-08 05:39:09.352819 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-4160 vulnerable 2026-06-08 05:38:08.576378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3749 vulnerable 2026-06-08 05:33:53.922207 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25220 vulnerable 2026-06-08 05:30:40.357850 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25217 vulnerable 2026-06-08 05:30:40.327141 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23841 vulnerable 2026-06-08 05:30:03.126329 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23839 vulnerable 2026-06-08 05:30:03.095676 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23337 vulnerable 2026-06-08 05:30:02.728893 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7793 vulnerable 2026-06-08 05:27:14.276885 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-28500 vulnerable 2026-06-08 05:23:56.203419 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12762 vulnerable 2026-06-08 05:17:59.048461 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.