Vulnerability in SINEC Traffic Analyzer Web Server Due to HSTS Non-Compliance

CVE-2024-35210

Summary

The SINEC Traffic Analyzer, specifically version 6GK8822-1BG01-0BA0, is susceptible to a significant vulnerability due to its web server's failure to enforce HTTP Strict Transport Security (HSTS). This oversight may permit attackers to execute downgrade attacks, compromising the confidentiality of sensitive information. The vulnerability affects all versions of the product prior to V1.2, necessitating immediate attention by users to ensure their systems remain secure against potential threats. For more detailed information, visit the official reference page.

References