Total vulnerabilities in the database
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly sanitize user provided paths for SFTP-based file up- and downloads. This could allow an authenticated remote attacker to manipulate arbitrary files on the filesystem and achieve arbitrary code execution on the device.
| Software | From | Fixed in |
|---|---|---|
| siemens / sinec_ins | 1.0-sp1 | 1.0-sp1.x |
| siemens / sinec_ins | - | 1.0 |
| siemens / sinec_ins | 1.0 | 1.0.x |
| siemens / sinec_ins | 1.0-sp2 | 1.0-sp2.x |
| siemens / sinec_ins | 1.0-sp2_update_1 | 1.0-sp2_update_1.x |
| siemens / sinec_ins | 1.0-sp2_update_2 | 1.0-sp2_update_2.x |