CVE-2025-40767

HIGH

SINEC Traffic Analyzer <V3.0 - Privilege Escalation

Title source: llm
STIX 2.1

Description

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application runs docker containers without adequate security controls to enforce isolation. This could allow an attacker to gain elevated access, potentially accessing sensitive host system resources.

Scores

CVSS v3 7.8
EPSS 0.0002
EPSS Percentile 5.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-250
Status published
Products (1)
siemens/sinec_traffic_analyzer < 3.0
Published Aug 12, 2025
Tracked Since Feb 18, 2026