SINEC INS vulnerabilities | LiveThreat CVE Feed

Product

SINEC INS

by Siemens · last CVE Jun 9, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

9.9

Max CVSS

New 30D

Vulnerabilities42 In the news1 Timeline

Severity mix

Critical 6High 17Medium 16Low 3

Severity

All severities42 Critical6 High17 Medium16 Low3

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add SINEC INS to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-44487 In wildKEV	7.5	100%	Oct 10	HTTP/2 Rapid Reset Attack Vulnerability Affected: before 1.0; 1.0; 1.0; 1.0; 1.0; 1.0
CVE-2026-46746	8.8	0%	Jun 9	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6) Affected: before V1.0 SP2 Update 6
CVE-2022-45094	8.8	1%	Jan 10	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2022-45093	8.8	1%	Jan 10	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2022-45092	8.8	31%	Jan 10	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2023-48431	8.6	1%	Dec 12	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2) Affected: before 1.0; 1.0; 1.0; 1.0; 1.0
CVE-2024-46892	8.1	0%	Nov 12	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3) Affected: before V1.0 SP2 Update 3
CVE-2022-32212	8.1	6%	Jul 14	A OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due to an insufficient IsAllowedHost check that can easily be bypassed because… Affected: before 1.0; 1.0; 1.0
CVE-2026-46748	7.8	0%	Jun 9	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6) Affected: before V1.0 SP2 Update 6
CVE-2020-12762	7.8	2%	May 9	json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend Affected: 1.0; 1.0
CVE-2024-46891	7.5	1%	Nov 12	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3) Affected: before V1.0 SP2 Update 3
CVE-2021-3749	7.5	9%	Aug 31	axios is vulnerable to Inefficient Regular Expression Complexity Affected: before 1.0; 1.0; 1.0
CVE-2020-7793	7.5	4%	Dec 11	The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service (ReDoS) in multiple regexes (see linked commit for more info) Affected: before 1.0; 1.0; 1.0
CVE-2021-25217	7.4	6%	May 26	In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series) are… Affected: before 1.0; 1.0; 1.0
CVE-2022-2068	7.3	96%	Jun 21	The c_rehash script allows command injection Affected: before 1.0; 1.0; 1.0; 1.0
CVE-2023-48428	7.2	1%	Dec 12	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2) Affected: before 1.0; 1.0; 1.0; 1.0; 1.0
CVE-2021-23337	7.2	21%	Feb 15	Command Injection Affected: before 1.0; 1.0; 1.0