threat-intel
Siemens SINEC INS
Critical
Summary
This CISA advisory details a critical vulnerability affecting Siemens SINEC INS versions prior to V1.0 SP2 Update 6. The vulnerability stems from improper input sanitization, allowing for command injection, path traversal, and weak password hashing, potentially leading to remote code execution, unauthorized access, and privilege escalation. Siemens has released an updated version to address these issues, and CISA recommends immediate action to mitigate the risk.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data