PT-2024-8705 · Siemens · Sinec Ins

Published 2024-11-12 · Updated 2024-11-17 · CVE-2024-46888

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SINEC INS versions prior to V1.0 SP2 Update 3

Description A vulnerability has been identified in the affected application, which does not properly sanitize user-provided paths for SFTP-based file up- and downloads. This could allow an authenticated remote attacker to manipulate arbitrary files on the filesystem and achieve arbitrary code execution on the device. The issue is related to errors in cleaning up paths for file uploads.

Recommendations For versions prior to V1.0 SP2 Update 3, update to V1.0 SP2 Update 3 or later to resolve the issue. As a temporary workaround, consider restricting access to SFTP-based file up- and downloads until a patch is available. Avoid using user-provided paths for SFTP-based file up- and downloads in the affected application until the issue is resolved.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2024-10307

CVE-2024-46888

Affected Products

Sinec Ins

References · 8

• https://cert-portal.siemens.com/productcert/html/ssa-915275.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-46888 · Security Note
• https://osv.dev/vulnerability/CVE-2024-46888 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-10307 · Security Note
• https://twitter.com/CveFindCom/status/1856329297780179133 · Twitter Post
• https://twitter.com/cracbot/status/1858027357669568549 · Twitter Post
• https://t.me/cvedetector/10615 · Telegram Post
• https://twitter.com/CVEnew/status/1856321757164052563 · Twitter Post