CVE-2024-46891 | THREATINT

Description

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly restrict the size of generated log files. This could allow an unauthenticated remote attacker to trigger a large amount of logged events to exhaust the system's resources and create a denial of service condition.

Reserved 2024-09-12 | Published 2024-11-12 | Updated 2024-11-12 | Assigner siemens

MEDIUM: 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

MEDIUM: 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Problem types

CWE-400: Uncontrolled Resource Consumption

Product status

Default status

unknown

Any version before V1.0 SP2 Update 3

affected

References

cert-portal.siemens.com/productcert/html/ssa-915275.html

cve.org (CVE-2024-46891)

nvd.nist.gov (CVE-2024-46891)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.