CVE-2025-40767CWE-250
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0)
High · published August 12, 2025
What it is
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application runs docker containers without adequate security controls to enforce isolation. This could allow an attacker to gain elevated access, potentially accessing sensitive host system resources.
The record
Technical detail
- CVSS v4.0
- 8.8 · HIGH
- Vector
- CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
- EPSS
- 0.00131 · 2.5th percentile
- Weakness
- CWE-250 · Execution with Unnecessary Privileges
- Published
- 2025-08-12T11:17Z
EPSS history
Timeline