VULNERABILITY INTELLIGENCE
CVE-2024-41904
CVSS score7.5 HIGH
EPSS probability0.54%
CISA KEVNot currently listed
Published2024-08-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application do not properly enforce restriction of excessive authentication attempts. This could allow an unauthenticated attacker to conduct brute force attacks against legitimate user credentials or keys.
Weakness classification
- productcert@siemens.com: CWE-307
Primary references
- productcert@siemens.com — Vendor Advisory