SINEC Traffic Analyzer V<2.0 Container RootFS Priv Esc
CVE-2024-41903 Published on August 13, 2024
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application mounts the container's root filesystem with read and write privileges. This could allow an attacker to alter the container's filesystem leading to unauthorized modifications and data corruption.
Weakness Type
Improper Privilege Management
The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Products Associated with CVE-2024-41903
Want to know whenever a new CVE is published for Siemens Sinec Traffic Analyzer? stack.watch will email you.
Affected Versions
Siemens SINEC Traffic Analyzer:- Before V2.0 is affected.
- Before 2.0 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.