SINEC INS vulnerabilities | LiveThreat CVE Feed

Product

SINEC INS

by Siemens · last CVE Jun 9, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

9.9

Max CVSS

New 30D

Vulnerabilities42 In the news1 Timeline

Severity mix

Critical 6High 17Medium 16Low 3

Severity

All severities42 Critical6 High17 Medium16 Low3

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add SINEC INS to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-44487 In wildKEV	7.5	100%	Oct 10	HTTP/2 Rapid Reset Attack Vulnerability Affected: before 1.0; 1.0; 1.0; 1.0; 1.0; 1.0
CVE-2024-46888	9.9	1%	Nov 12	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3) Affected: before 1.0; 1.0; 1.0; 1.0; 1.0; 1.0
CVE-2026-46749	9.8	0%	Jun 9	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6) Affected: before V1.0 SP2 Update 6
CVE-2023-48427	9.8	0%	Dec 12	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2) Affected: before 1.0; 1.0; 1.0; 1.0; 1.0
CVE-2024-46890	9.1	1%	Nov 12	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3) Affected: before 1.0; 1.0; 1.0; 1.0; 1.0; 1.0
CVE-2022-35255	9.1	2%	Dec 5	A weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with EntropySource() in SecretKeyGenTraits::DoKeyGen() in src/crypto/crypto_keygen.cc Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2021-22945	9.1	7%	Sep 23	When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in… Affected: before 1.0.1.1
CVE-2026-46746	8.8	0%	Jun 9	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6) Affected: before V1.0 SP2 Update 6
CVE-2022-45094	8.8	1%	Jan 10	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2022-45093	8.8	1%	Jan 10	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2022-45092	8.8	31%	Jan 10	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2023-48431	8.6	1%	Dec 12	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2) Affected: before 1.0; 1.0; 1.0; 1.0; 1.0
CVE-2024-46892	8.1	0%	Nov 12	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3) Affected: before 1.0; 1.0; 1.0; 1.0; 1.0; 1.0
CVE-2022-32212	8.1	6%	Jul 14	A OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due to an insufficient IsAllowedHost check that can easily be bypassed because… Affected: before 1.0; 1.0; 1.0
CVE-2026-46748	7.8	0%	Jun 9	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6) Affected: before V1.0 SP2 Update 6
CVE-2020-12762	7.8	2%	May 9	json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend Affected: 1.0; 1.0
CVE-2024-46891	7.5	1%	Nov 12	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3) Affected: through 1.0; 1.0; 1.0; 1.0; 1.0
CVE-2021-3749	7.5	9%	Aug 31	axios is vulnerable to Inefficient Regular Expression Complexity Affected: before 1.0; 1.0; 1.0
CVE-2020-7793	7.5	4%	Dec 11	The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service (ReDoS) in multiple regexes (see linked commit for more info) Affected: before 1.0; 1.0; 1.0
CVE-2021-25217	7.4	6%	May 26	In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series) are… Affected: before 1.0; 1.0; 1.0
CVE-2022-2068	7.3	96%	Jun 21	The c_rehash script allows command injection Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2023-48428	7.2	1%	Dec 12	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2) Affected: before 1.0; 1.0; 1.0; 1.0; 1.0
CVE-2021-23337	7.2	21%	Feb 15	Command Injection Affected: before 1.0; 1.0; 1.0
CVE-2021-25220	6.8	3%	Mar 23	BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those… Affected: before 1.0; 1.0; 1.0
CVE-2022-35256	6.5	3%	Dec 5	The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated with CLRF Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2022-32215	6.5	70%	Jul 14	The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers Affected: 1.0; 1.0; 1.0
CVE-2022-32213	6.5	45%	Jul 14	The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly parse and validate Transfer-Encoding headers and can lead to HTTP Request… Affected: 1.0; 1.0; 1.0
CVE-2022-0155	6.5	2%	Jan 10	follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor Affected: before 1.0; 1.0; 1.0
CVE-2022-0235	6.1	2%	Jan 16	Exposure of Sensitive Information to an Unauthorized Actor in node-fetch/node-fetch Affected: before 1.0; 1.0; 1.0
CVE-2021-4160	5.9	4%	Jan 28	There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure Affected: before 1.0; 1.0; 1.0
CVE-2021-23841	5.9	7%	Feb 16	The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509… Affected: before 1.0; 1.0; 1.0
CVE-2020-28168	5.9	2%	Nov 6	Axios NPM package 0.21.0 contains a Server-Side Request Forgery (SSRF) vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect… Affected: before 1.0; 1.0
CVE-2024-46894	5.4	0%	Nov 12	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3) Affected: through 1.0; 1.0; 1.0; 1.0; 1.0
CVE-2026-46747	5.3	0%	Jun 9	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6) Affected: before V1.0 SP2 Update 6
CVE-2024-46889	5.3	0%	Nov 12	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3) Affected: before 1.0; 1.0; 1.0; 1.0; 1.0; 1.0
CVE-2022-32222	5.3	2%	Jul 14	A cryptographic vulnerability exists on Node.js on linux in versions of 18.x prior to 18.40.0 which allowed a default path for openssl.cnf that might be accessible under some… Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2022-2097	5.3	5%	Jul 5	AES OCB fails to encrypt some bytes Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2022-0396	5.3	3%	Mar 23	BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported Preview Edition Affected: before 1.0; 1.0; 1.0
CVE-2020-28500	5.3	7%	Feb 15	Regular Expression Denial of Service (ReDoS) Affected: before 1.0; 1.0; 1.0
CVE-2021-23839	3.7	3%	Feb 16	OpenSSL 1.0.2 supports SSLv2 Affected: before 1.0; 1.0; 1.0
CVE-2023-48430	2.7	1%	Dec 12	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2) Affected: before 1.0; 1.0; 1.0; 1.0; 1.0
CVE-2023-48429	2.7	1%	Dec 12	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2) Affected: before 1.0; 1.0; 1.0; 1.0; 1.0