Denial-of-Service Vulnerability in SINEC Traffic Analyzer by Siemens

CVE-2025-40766

What is CVE-2025-40766?

A vulnerability exists in the SINEC Traffic Analyzer, wherein the application operates Docker containers without sufficient resource and security restrictions. This oversight could enable malicious actors to execute denial-of-service (DoS) attacks, potentially disrupting the affected service and impacting network operations. It is crucial for users of version 3.0 and below to assess their security posture and apply necessary mitigations to thwart potential exploitation.

References