VULNERABILITY INTELLIGENCE
CVE-2024-41903
CVSS score6.6 MEDIUM
EPSS probability0.39%
CISA KEVNot currently listed
Published2024-08-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application mounts the container's root filesystem with read and write privileges. This could allow an attacker to alter the container's filesystem leading to unauthorized modifications and data corruption.
Weakness classification
- productcert@siemens.com: CWE-269
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- productcert@siemens.com — Vendor Advisory