← Database

CVE-2024-46891

MEDIUM CVSS: 5.3 Published: 2024-11-12 Modified: 2026-06-17

Description

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly restrict the size of generated log files. This could allow an unauthenticated remote attacker to trigger a large amount of logged events to exhaust the system's resources and create a denial of service condition.

Affected Platforms

Siemens Sinec Ins

Weakness Type

CWE-400, CWE-125

References