CVE-2026-46749

Vulnerability

A vulnerability exists in SINEC INS versions prior to V1.0 SP2 Update 6. The application uses a static, hardcoded salt for password hashing, shared across all users and installations, and employs an insufficient number of hashing iterations. This configuration makes the password storage susceptible to efficient brute-force and precomputed attacks.

Exploitation

An attacker with the ability to obtain the password hashes could leverage this vulnerability. By using brute-force techniques or precomputed rainbow tables against the static salt and low iteration count, an attacker can efficiently recover user passwords.

Impact

Successful exploitation allows an attacker to recover user passwords. This can lead to unauthorized access to the SINEC INS system, potentially compromising sensitive information or system control depending on the privileges of the compromised user accounts.

Mitigation

Siemens has released version V1.0 SP2 Update 6 for SINEC INS, which addresses this vulnerability. Users are advised to update to V1.0 SP2 Update 6 or a later version. Further details and download links can be found in the Siemens advisory [1].