Cross-Site Scripting Vulnerability in SINEC Traffic Analyzer by Siemens
CVE-2025-40769
7.5HIGH
What is CVE-2025-40769?
A vulnerability in the SINEC Traffic Analyzer, specifically in all versions prior to V3.0, poses a risk due to an improperly configured Content Security Policy that permits unsafe script execution. This flaw could be exploited by attackers to inject unauthorized scripts into the affected application, potentially compromising the security of user interactions and data. Organizations utilizing this product are urged to review their current configurations and update to mitigate this risk.
Affected Version(s)
SINEC Traffic Analyzer 0
References
CVSS V4
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved