Known vulnerabilities in SINEC INS - page 3

Vendor: Siemens
Software: SINEC INS
Software CPE: cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 112
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SINEC INS SINEC INS is affected by 112 known vulnerabilities: 17 high, 70 medium, 25 low Critical High Medium Low

Vulnerabilities (112)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61257 - UNIX Symbolic Link (Symlink) Following
CVE-2021-39135		 CWE-61 Low
No
No
 1.0.1.1 11.03.2022 SB2021083138
SB2022031104
SB2021120224
and 6 more
#VU61254 - Use After Free
CVE-2021-22940		 CWE-416 Medium
No
No
 1.0.1.1 11.03.2022 SB2021081615
SB2022031104
SB2022060618
and 23 more
#VU61253 - Improper Certificate Validation
CVE-2021-22939		 CWE-295 Medium
No
No
 1.0.1.1 11.03.2022 SB2021081614
SB2022031104
SB2022060618
and 25 more
#VU58206 - Absolute Path Traversal
CVE-2021-32803		 CWE-36 Medium
No
No
 1.0.1.1 17.11.2021 SB2021080329
SB2022031104
SB2022060618
and 26 more
#VU57498 - Improper input validation
CVE-2021-22931		 CWE-20 High
No
No
 1.0.1.1 19.10.2021 SB2021101945
SB2022020113
SB2022031104
and 28 more
#VU56610 - Double Free
CVE-2021-22945		 CWE-415 Low
No
No
 1.0.1.1 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 20 more
#VU55560 - Use After Free
CVE-2021-22930		 CWE-416 High
No
No
 1.0.1.1 03.08.2021 SB2021080320
SB2021080324
SB2021080325
and 35 more
#VU55149 - Use of Uninitialized Variable
CVE-2021-22925		 CWE-457 Medium
No
No
 1.0.1.1 21.07.2021 SB2021072108
SB2021072162
SB2021072202
and 38 more
#VU55148 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-22922		 CWE-611 Medium
No
No
 1.0.1.1 21.07.2021 SB2021072108
SB2021072162
SB2021072204
and 27 more
#VU55147 - Improper Certificate Validation
CVE-2021-22926		 CWE-295 Medium
No
No
 1.0.1.1 21.07.2021 SB2021072108
SB2021072162
SB2021072814
and 11 more
#VU55146 - Improper Certificate Validation
CVE-2021-22924		 CWE-295 Medium
No
No
 1.0.1.1 21.07.2021 SB2021072108
SB2021072162
SB2021072202
and 33 more
#VU55145 - Insufficiently Protected Credentials
CVE-2021-22923		 CWE-522 Medium
No
No
 1.0.1.1 21.07.2021 SB2021072108
SB2021072162
SB2021072204
and 28 more
#VU54625 - Incorrect Default Permissions
CVE-2021-22921		 CWE-276 Low
No
No
 1.0.1.1 08.07.2021 SB2021100417
SB2022031104
SB2022060315
and 7 more
#VU54624 - Out-of-bounds read
CVE-2021-22918		 CWE-125 Medium
No
No
 1.0.1.1 08.07.2021 SB2021070819
SB2021072009
SB2021081123
and 40 more
#VU53589 - Use After Free
CVE-2021-22901		 CWE-416 High
No
No
 1.0.1.1 26.05.2021 SB2021052620
SB2021052711
SB2021052719
and 18 more
#VU53587 - Use of Uninitialized Variable
CVE-2021-22898		 CWE-457 Medium
No
No
 1.0.1.1 26.05.2021 SB2021052620
SB2021052711
SB2021060128
and 47 more
#VU53584 - Inadequate Encryption Strength
CVE-2021-22897		 CWE-326 Low
No
No
 1.0.1.1 26.05.2021 SB2021052620
SB2021052719
SB2021060321
and 9 more
#VU51822 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-22890		 CWE-300 Medium
No
No
 1.0.1.1 31.03.2021 SB2021033111
SB2021040104
SB2021040117
and 15 more
#VU50954 - Resource Management Errors
CVE-2021-22883		 CWE-399 Medium
No
No
 1.0.1.1 25.02.2021 SB2021022530
SB2021022532
SB2021022614
and 36 more
#VU12576 - Improper input validation
CVE-2018-7160		 CWE-20 High
No
No
 1.0.1.1 10.05.2018 SB2018051406
SB2018033045
SB2022031104
and 9 more


Showing elements 41 - 60 out of 112