CVE-2026-46749: sinec ins through 1.0 (inclusive), 1.0 · update sp1, 1.0 · update sp2 (+5 more affected versions); +1 more affected…

Affected technology

sinec ins · through 1.0 (inclusive)
siemens

sinec ins · 1.0 · update sp1
siemens

sinec ins · 1.0 · update sp2
siemens

sinec ins · 1.0 · update sp2_update_1
siemens

sinec ins · 1.0 · update sp2_update_2
siemens

sinec ins · 1.0 · update sp2_update_3
siemens

sinec ins · 1.0 · update sp2_update_4
siemens

sinec ins · 1.0 · update sp2_update_5
siemens

SINEC INS · 0 to before V1.0 SP2 Update 6
Siemens

Description’s affected range: versions < V1.0 SP2 Update 6)

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · High privileges required · No user interaction required

What an attacker can do

An attacker could efficiently recover user passwords using brute-force or precomputed attacks, potentially resulting in unauthorized access. Vendor/CNA’s CVSS 4.0 assessment (base score 5.0/10) rates confidentiality impact as low; integrity and availability impact as none.