Known vulnerabilities in SINEC INS - page 2

Vendor: Siemens
Software: SINEC INS
Software CPE: cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 112
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SINEC INS SINEC INS is affected by 112 known vulnerabilities: 17 high, 70 medium, 25 low Critical High Medium Low

Vulnerabilities (112)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71093 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-45092		 CWE-22 Medium
No
No
 1.0 SP2 Update 1 11.01.2023 SB2023011137
#VU71092 - Command injection
CVE-2022-45094		 CWE-77 Low
No
No
 1.0 SP2 Update 1 11.01.2023 SB2023011137
#VU71090 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-45093		 CWE-22 Medium
No
No
 1.0 SP2 Update 1 11.01.2023 SB2023011137
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068		 CWE-78 Medium
No
No
 1.0 SP2 Update 1 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more
#VU63704 - Incorrect Regular Expression
CVE-2020-7793		 CWE-185 Medium
No
No
 1.0 SP2 26.05.2022 SB2020121119
SB2022052615
SB2022091438
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292		 CWE-78 Medium
Available
No
 1.0 SP2 Update 1 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more
#VU61669 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0155		 CWE-200 Low
No
No
 1.0 SP2 28.03.2022 SB2022032840
SB2022032843
SB2022071505
and 32 more
#VU61471 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0235		 CWE-200 Low
No
No
 1.0 SP2 20.03.2022 SB2022032001
SB2022032002
SB2022032009
and 35 more
#VU61423 - Resource Management Errors
CVE-2022-0396		 CWE-399 Medium
No
No
 1.0 SP2 17.03.2022 SB2022031701
SB2022031719
SB2022031728
and 17 more
#VU61422 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2021-25220		 CWE-350 Medium
No
No
 1.0 SP2 17.03.2022 SB2022031701
SB2022031719
SB2022031725
and 57 more
#VU60166 - Cryptographic Issues
CVE-2021-4160		 CWE-310 Low
No
No
 1.0 SP2 28.01.2022 SB2022012811
SB2022031611
SB2022042517
and 29 more
#VU56963 - Resource exhaustion
CVE-2021-3749		 CWE-400 Medium
No
No
 1.0 SP2 30.09.2021 SB2021093011
SB2021093012
SB2021120334
and 5 more
#VU54394 - Incorrect Regular Expression
CVE-2020-28500		 CWE-185 Medium
No
No
 1.0 SP2 27.06.2021 SB2021062702
SB2021062703
SB2021090905
and 30 more
#VU53609 - Improper input validation
CVE-2021-25217		 CWE-20 Medium
No
No
 1.0 SP2 27.05.2021 SB2021052708
SB2021052808
SB2021052902
and 38 more
#VU53202 - Command injection
CVE-2021-23337		 CWE-77 Medium
No
No
 1.0 SP2 12.05.2021 SB2021021525
SB2021051230
SB2021062703
and 59 more
#VU50744 - Cryptographic Issues
CVE-2021-23839		 CWE-310 Low
No
No
 1.0 SP2 17.02.2021 SB2021021702
SB2021041501
SB2021041502
and 15 more
#VU50740 - NULL Pointer Dereference
CVE-2021-23841		 CWE-476 Medium
No
No
 1.0 SP2 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 66 more
#VU49251 - Server-Side Request Forgery (SSRF)
CVE-2020-28168		 CWE-918 Medium
No
No
 1.0 SP2 06.11.2020 SB2021010417
SB2021022518
SB2022061413
and 4 more
#VU27882 - Out-of-bounds write
CVE-2020-12762		 CWE-787 High
No
No
 1.0 SP2 13.05.2020 SB2020051323
SB2020052812
SB2020061526
and 54 more
#VU2972 - Exposure of sensitive information to an unauthorized actor
CVE-2016-0701		 CWE-200 Medium
No
No
 1.0 SP2 30.11.-0001 SB2017121702
SB2016012801
SB2018040102
and 10 more


Showing elements 21 - 40 out of 112