CVE-2024-41905

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application do not have access control for accessing the files. This could allow an authenticated attacker with low privilege's to get access to sensitive information.

• CWE-284

• https://cert-portal.siemens.com/productcert/html/ssa-716317.htmlVendor Advisory

Published

Aug 13, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-4189Improper Restriction of XML External Entity Reference vulner…8
• CVE-2024-41890Missing Release of Resource after Effective Lifetime vulnera…5.3
• CVE-2024-4190Stored Cross-Site Scripting (XSS) vulnerabilities have been …8.4
• CVE-2024-41902A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2024-41903A vulnerability has been identified in SINEC Traffic Analyze…7.2
• CVE-2024-41904A vulnerability has been identified in SINEC Traffic Analyze…7.5
• CVE-2024-41906A vulnerability has been identified in SINEC Traffic Analyze…6.5
• CVE-2024-41907A vulnerability has been identified in SINEC Traffic Analyze…5.4
• CVE-2024-41908A vulnerability has been identified in NX (All versions < V2…7.8
• CVE-2024-41909Like many other SSH implementations, Apache MINA SSHD suffer…5.9
• CVE-2024-41910A vulnerability was discovered in the firmware builds up to …6.1
• CVE-2024-41911A vulnerability was discovered in the firmware builds up to …5.4