PT-2026-47735 · Siemens · Sinec Ins

Published 2026-06-09 · Updated 2026-06-09 · CVE-2026-46749

Mitre

CVSS v3.1

7.5

High

Base vector

AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application uses a password hashing implementation with a static, hardcoded salt shared across all users and installations, and is configured with an insufficient number of iterations. This could allow an attacker to efficiently recover user passwords using brute-force or precomputed attacks, potentially resulting in unauthorized access.

Fix

Weakness Enumeration

CWE-760

Related Identifiers

CVE-2026-46749

Affected Products

Sinec Ins

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-46749 · Security Note
• https://cert-portal.siemens.com/productcert/html/ssa-860189.html · Note