CVE-2024-35210

MEDIUM

Siemens Sinec Traffic Analyzer < 1.2 - Cleartext Transmission

Title source: rule
STIX 2.1

Description

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected web server is not enforcing HSTS. This could allow an attacker to perform downgrade attacks exposing confidential information.

References (1)

Scores

CVSS v3 5.1
EPSS 0.0018
EPSS Percentile 39.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-319
Status published
Products (1)
siemens/sinec_traffic_analyzer < 1.2
Published Jun 11, 2024
Tracked Since Feb 18, 2026