CVE-2025-40767
BaseFortify
Publication date: 2025-08-12
Last updated on: 2025-08-15
Assigner: Siemens AG
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| siemens | sinec_traffic_analyzer | to 3.0 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-250 | The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in SINEC Traffic Analyzer versions prior to V3.0, where the application runs docker containers without sufficient security controls to enforce isolation. This flaw could allow an attacker to gain elevated access, potentially enabling them to access sensitive resources on the host system.
How can this vulnerability impact me? :
The vulnerability can lead to an attacker obtaining elevated privileges on the host system by escaping container isolation. This could result in unauthorized access to sensitive host system resources, potentially compromising system integrity, confidentiality, and availability.