CVE-2026-46748highCWE-250

CVE-2026-46748: falha de alta gravidade em Siemens SINEC INS

Publicada em

Seguir esta CVE+ Monitorar SINEC INS

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.7epss 0.2%
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected system includes a binary that is configured with the cap_dac_override capability. This capability allows the process to bypass file system permission checks, resulting in unrestricted file system access. This could allow a local attacker to escalate privileges leading to arbitrary file modification and gaining root privileges on the system.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Siemens · SINEC INS
CVEs relacionadas — Siemens SINEC INS

No mesmo produto, das mais perigosas para as menos.

CVE-2022-45092CRITICALCVE-2022-45092EPSS 31.4%CVE-2022-45094HIGHCVE-2022-45094EPSS 1.4%CVE-2022-45093HIGHCVE-2022-45093EPSS 1.2%CVE-2024-46888CRITICALCVE-2024-46888EPSS 0.9%CVE-2024-46890CRITICALCVE-2024-46890EPSS 0.7%CVE-2023-48431MEDIUMCVE-2023-48431EPSS 0.6%