Cross-Site Request Forgery Vulnerability in Siemens SINEC Traffic Analyzer

CVE-2024-35207

What is CVE-2024-35207?

A vulnerability exists in the web interface of the Siemens SINEC Traffic Analyzer, specifically affecting all versions prior to V1.2. This flaw exposes the product to potential Cross-Site Request Forgery (CSRF) attacks. An attacker can exploit this vulnerability by deceiving an authenticated user into clicking a malicious link, leading to unauthorized actions being performed on the device without the user's knowledge. This can compromise the integrity and security of the affected systems, allowing attackers to manipulate settings or gather sensitive data.

References