CVE-2024-46889

Summary

CVE-2024-46889 is a newly identified vulnerability affecting all versions of SINEC INS (Integrated Information Systems) prior to V1.0 SP2 Update 3. The weakness lies in the use of hard-coded cryptographic key material to secure configuration files. An attacker can exploit this by reverse engineering the application binary, gaining unauthorized access to the cryptographic keys and the ability to decrypt arbitrary backup files. This vulnerability poses a significant risk to data confidentiality and should be addressed promptly through the installation of the latest software update.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.