Internal Service Port Exposure in SINEC Traffic Analyzer by Siemens

CVE-2025-40768

What is CVE-2025-40768?

A vulnerability exists in SINEC Traffic Analyzer that allows unauthorized access due to an exposed internal service port. This flaw can enable attackers to reach and potentially manipulate the application, leading to unauthorized actions or data leakage. It is crucial for users of SINEC Traffic Analyzer to ensure their systems are upgraded past version 3.0 to mitigate any risks associated with this vulnerability.

References