Known vulnerabilities in SINEC INS

Vendor: Siemens
Software: SINEC INS
Software CPE: cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 112
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SINEC INS SINEC INS is affected by 112 known vulnerabilities: 17 high, 70 medium, 25 low Critical High Medium Low

Vulnerabilities (112)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134740 - Use of a One-Way Hash with a Predictable Salt
CVE-2026-46749		 CWE-760 Low
No
No
 1.0 SP2 Update 6 17.06.2026 SB2026061749
#VU134737 - Execution with Unnecessary Privileges
CVE-2026-46748		 CWE-250 Medium
No
No
 1.0 SP2 Update 6 17.06.2026 SB2026061749
#VU134736 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-46747		 CWE-22 Medium
No
No
 1.0 SP2 Update 6 17.06.2026 SB2026061749
#VU134730 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-46746		 CWE-78 Medium
No
No
 1.0 SP2 Update 6 17.06.2026 SB2026061749
#VU84433 - Improper Check for Unusual or Exceptional Conditions
CVE-2023-48431		 CWE-754 Medium
No
No
 1.0 SP2 Update 2 14.12.2023 SB2023121430
#VU84431 - Improper input validation
CVE-2023-48430		 CWE-20 Low
No
No
 1.0 SP2 Update 2 14.12.2023 SB2023121430
#VU84429 - Unexpected Status Code or Return Value
CVE-2023-48429		 CWE-394 Low
No
No
 1.0 SP2 Update 2 14.12.2023 SB2023121430
#VU84428 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-48428		 CWE-78 Low
No
No
 1.0 SP2 Update 2 14.12.2023 SB2023121430
#VU84426 - Improper Certificate Validation
CVE-2023-48427		 CWE-295 High
No
No
 1.0 SP2 Update 2 14.12.2023 SB2023121430
#VU80650 - Heap-based Buffer Overflow
CVE-2023-3935		 CWE-122 High
No
No
 - 12.09.2023 SB2023091244
SB2023111628
SB2024010512
#VU73960 - Resource exhaustion
CVE-2023-0464		 CWE-400 Medium
No
No
 1.0 SP2 Update 2 22.03.2023 SB2023032241
SB2023033057
SB2023033058
and 100 more
#VU73831 - Exposure of sensitive information to an unauthorized actor
CVE-2023-27538		 CWE-200 Medium
No
No
 1.0 SP2 Update 2 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 40 more
#VU67850 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-35256		 CWE-444 Medium
No
No
 1.0 SP2 Update 1 03.10.2022 SB2022100347
SB2022100401
SB2022100402
and 50 more
#VU67849 - Use of Insufficiently Random Values
CVE-2022-35255		 CWE-330 Medium
No
No
 1.0 SP2 Update 1 03.10.2022 SB2022100401
SB2022100402
SB2022100528
and 40 more
#VU65282 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32215		 CWE-444 Medium
No
No
 1.0 SP2 Update 1 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 54 more
#VU65280 - Security Features
CVE-2022-32222		 CWE-254 Medium
No
No
 1.0 SP2 Update 1 13.07.2022 SB2022071338
SB2022081105
SB2022100401
and 10 more
#VU65275 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32213		 CWE-444 Medium
No
No
 1.0 SP2 Update 1 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 55 more
#VU65273 - Improper Check or Handling of Exceptional Conditions
CVE-2022-32212		 CWE-703 Medium
No
No
 1.0 SP2 Update 1 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 48 more
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097		 CWE-311 Low
No
No
 1.0 SP2 Update 1 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU64921 - Heap-based Buffer Overflow
CVE-2022-2274		 CWE-122 High
Available
No
 1.0 SP2 Update 1 05.07.2022 SB2022070509
SB2022070531
SB2022102078
and 7 more


Showing elements 1 - 20 out of 112