{"id":17910,"date":"2026-07-15T08:28:11","date_gmt":"2026-07-15T06:28:11","guid":{"rendered":"https:\/\/limessecurity.com\/?p=17910"},"modified":"2026-07-15T08:28:11","modified_gmt":"2026-07-15T06:28:11","slug":"siemens-sinec-ins-from-web-interface-to-root","status":"publish","type":"post","link":"https:\/\/limessecurity.com\/en\/siemens-sinec-ins-from-web-interface-to-root\/","title":{"rendered":"Siemens SINEC INS: Web-Login zu Root-Shell"},"content":{"rendered":"[vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” row_position_desktop=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none”][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text css=”” text_direction=”default”]As part of our security research, we identified an attack chain in<\/span> Siemens SINEC INS that could be used to An authenticated web user<\/strong> can gain full root privileges<\/strong> on the underlying Linux system. In total, we identified four vulnerabilities. Two of them can be combined to form the attack chain described below. <\/span>[\/vc_column_text][divider line_type=”No Line” custom_height=”15px”][vc_column_text css=”” text_direction=”default”]SINEC INS provides core network services such as DHCP, DNS, NTP, RADIUS, and SFTP for industrial networks. An attacker with root privileges can thus control the core services of an entire network segment; the potential for damage is correspondingly high in an OT environment. Man-in-the-middle attacks can be carried out using manipulated DNS and DHCP responses; authentication can be bypassed via RADIUS; and time-dependent processes can be disrupted via NTP. Siemens has addressed these vulnerabilities with V1.0 SP2 Update 6<\/strong>. Operators using an older version should install the update as soon as possible.[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” top_padding=”1%” bottom_padding=”1%” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” row_position_desktop=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text css=”” text_direction=”default”]\n

Discovered Vulnerabilities<\/h2>\n[\/vc_column_text][divider line_type=”No Line”][nectar_icon_list color=”default” direction=”horizontal” columns=”3″ icon_size=”small” icon_style=”border”][nectar_icon_list_item icon_type=”icon” text_full_html=”simple” title=”List Item” id=”1784016644598-4″ icon_fontawesome=”fa fa-thumb-tack” header=”Product:” text=”Siemens SINEC INS” tab_id=”1784016644599-5″][\/nectar_icon_list_item][nectar_icon_list_item icon_type=”icon” text_full_html=”simple” title=”List Item” id=”1784016644611-4″ icon_fontawesome=”fa fa-thumb-tack” header=”Affected versions:” text=”All versions prior to V1.0 SP2 Update 6″ tab_id=”1784016644612-7″][\/nectar_icon_list_item][nectar_icon_list_item icon_type=”icon” text_full_html=”simple” title=”List Item” id=”1784016644620-5″ icon_fontawesome=”fa fa-thumb-tack” header=”Found by:” text=”Sixtus Leonhardsberger, Limes Security GmbH” tab_id=”1784016644621-3″][\/nectar_icon_list_item][\/nectar_icon_list][divider line_type=”Full Width Line” line_thickness=”1″ divider_color=”default”][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” top_padding=”1%” bottom_padding=”1%” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” row_position_desktop=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/2″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_row_inner equal_height=”yes” content_placement=”top” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”center” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” top_margin=”0″ constrain_group_1=”yes” bottom_margin=”0″ left_margin=”0″ constrain_group_2=”yes” right_margin=”0″ flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/3″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” column_padding_type=”default” gradient_type=”default”][vc_pie value=”87″ label_value=”8.7″ color=”#cd1719″ css=”.vc_custom_1784013382555{background-position: center !important;background-repeat: no-repeat !important;background-size: cover !important;}” title=”CVSS v4.0 Score”][\/vc_column_inner][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” centered_text=”true” desktop_text_alignment=”left” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”2\/3″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” column_padding_type=”default” gradient_type=”default”][nectar_icon_list color=”default” direction=”vertical” icon_size=”small” icon_style=”border”][nectar_icon_list_item icon_type=”icon” text_full_html=”html” title=”List Item” id=”1784016644695-1″ icon_fontawesome=”fa fa-thumb-tack” header=”CVE \/ Vendor ID:” tab_id=”1784016644696-8″]CVE-2026-46746<\/a>[\/nectar_icon_list_item][\/nectar_icon_list][\/vc_column_inner][\/vc_row_inner][vc_row_inner column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/2″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][nectar_btn size=”small” button_style=”regular” button_color_2=”Accent-Color” icon_family=”none” text=”CVSS Calculator” url=”https:\/\/www.first.org\/cvss\/calculator\/4-0#CVSS:4.0\/AV:N\/AC:L\/AT:N\/PR:L\/UI:N\/VC:H\/VI:H\/VA:H\/SC:N\/SI:N\/SA:N” margin_left=”5%”][\/vc_column_inner][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/2″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text css=”” text_direction=”default”]\n

OS Command Injection<\/p>\n[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][divider line_type=”No Line” custom_height=”10 px”][\/vc_column][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/2″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_row_inner equal_height=”yes” content_placement=”top” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”center” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” top_margin=”0″ constrain_group_1=”yes” bottom_margin=”0″ left_margin=”0″ constrain_group_2=”yes” right_margin=”0″ flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/3″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” column_padding_type=”default” gradient_type=”default”][vc_pie value=”87″ label_value=”8.7″ color=”#cd1719″ css=”.vc_custom_1784013454331{background-position: center !important;background-repeat: no-repeat !important;background-size: cover !important;}” title=”CVSS v4.0 Score”][\/vc_column_inner][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” centered_text=”true” desktop_text_alignment=”left” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”2\/3″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” column_padding_type=”default” gradient_type=”default”][nectar_icon_list color=”default” direction=”vertical” icon_size=”small” icon_style=”border”][nectar_icon_list_item icon_type=”icon” text_full_html=”html” title=”List Item” id=”1784016644789-1″ icon_fontawesome=”fa fa-thumb-tack” header=”CVE \/ Vendor ID:” tab_id=”1784016644789-7″]CVE-2026-46748<\/a>[\/nectar_icon_list_item][\/nectar_icon_list][\/vc_column_inner][\/vc_row_inner][vc_row_inner column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/2″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][nectar_btn size=”small” button_style=”regular” button_color_2=”Accent-Color” icon_family=”none” text=”CVSS Calculator” url=”https:\/\/www.first.org\/cvss\/calculator\/4-0#CVSS:4.0\/AV:N\/AC:L\/AT:N\/PR:L\/UI:N\/VC:H\/VI:H\/VA:H\/SC:N\/SI:N\/SA:N” margin_left=”5%”][\/vc_column_inner][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/2″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text css=”” text_direction=”default”]\n

Privilege escalation<\/p>\n[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][divider line_type=”No Line” custom_height=”10 px”][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” top_padding=”1%” bottom_padding=”1%” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” row_position_desktop=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/2″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_row_inner equal_height=”yes” content_placement=”top” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”center” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” top_margin=”0″ constrain_group_1=”yes” bottom_margin=”0″ left_margin=”0″ constrain_group_2=”yes” right_margin=”0″ flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/3″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” column_padding_type=”default” gradient_type=”default”][vc_pie value=”53″ label_value=”5.3″ color=”#cd1719″ css=”.vc_custom_1784013504349{background-position: center !important;background-repeat: no-repeat !important;background-size: cover !important;}” title=”CVSS v4.0 Score”][\/vc_column_inner][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” centered_text=”true” desktop_text_alignment=”left” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”2\/3″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” column_padding_type=”default” gradient_type=”default”][nectar_icon_list color=”default” direction=”vertical” icon_size=”small” icon_style=”border”][nectar_icon_list_item icon_type=”icon” text_full_html=”html” title=”List Item” id=”1784016644887-2″ icon_fontawesome=”fa fa-thumb-tack” header=”CVE \/ Vendor ID:” tab_id=”1784016644887-3″]CVE-2026-46747<\/a>[\/nectar_icon_list_item][\/nectar_icon_list][\/vc_column_inner][\/vc_row_inner][vc_row_inner column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/2″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][nectar_btn size=”small” button_style=”regular” button_color_2=”Accent-Color” icon_family=”none” text=”CVSS Calculator” url=”https:\/\/www.first.org\/cvss\/calculator\/4-0#CVSS:4.0\/AV:N\/AC:L\/AT:N\/PR:L\/UI:N\/VC:L\/VI:N\/VA:N\/SC:N\/SI:N\/SA:N” margin_left=”5%”][\/vc_column_inner][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/2″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text css=”” text_direction=”default”]\n

Path Traversal<\/p>\n[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][divider line_type=”No Line” custom_height=”10 px”][\/vc_column][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/2″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_row_inner equal_height=”yes” content_placement=”top” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”center” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” top_margin=”0″ constrain_group_1=”yes” bottom_margin=”0″ left_margin=”0″ constrain_group_2=”yes” right_margin=”0″ flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/3″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” column_padding_type=”default” gradient_type=”default”][vc_pie label_value=”5.0″ color=”#cd1719″ css=”.vc_custom_1784013554352{background-position: center !important;background-repeat: no-repeat !important;background-size: cover !important;}” title=”CVSS v4.0 Score”][\/vc_column_inner][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” centered_text=”true” desktop_text_alignment=”left” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”2\/3″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” column_padding_type=”default” gradient_type=”default”][nectar_icon_list color=”default” direction=”vertical” icon_size=”small” icon_style=”border”][nectar_icon_list_item icon_type=”icon” text_full_html=”html” title=”List Item” id=”1784016644995-7″ icon_fontawesome=”fa fa-thumb-tack” header=”CVE \/ Vendor ID:” tab_id=”1784016644996-4″]CVE-2026-46749<\/a>[\/nectar_icon_list_item][\/nectar_icon_list][\/vc_column_inner][\/vc_row_inner][vc_row_inner column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/2″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][nectar_btn size=”small” button_style=”regular” button_color_2=”Accent-Color” icon_family=”none” text=”CVSS Calculator” url=”https:\/\/www.first.org\/cvss\/calculator\/4-0#CVSS:4.0\/AV:L\/AC:H\/AT:P\/PR:H\/UI:N\/VC:L\/VI:N\/VA:N\/SC:H\/SI:H\/SA:H” margin_left=”5%”][\/vc_column_inner][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/2″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text css=”” text_direction=”default”]\n

Weak Password Hashing<\/p>\n[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][divider line_type=”No Line” custom_height=”10 px”][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” row_position_desktop=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none”][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][divider line_type=”No Line” custom_height=”20px”][vc_column_text css=”” text_direction=”default”]\n

Attack Chain: From an Authenticated Web User to Root on the Operating System<\/h2>\n[\/vc_column_text][divider line_type=”No Line” custom_height=”20 px”][vc_column_text css=”” text_direction=”default”]The following description outlines the interaction between the two most serious vulnerabilities. Detailed exploit steps are intentionally not disclosed; the focus is on the underlying attack pattern.[\/vc_column_text][image_with_animation image_url=”17890″ image_size=”full” max_width=”100%” max_width_mobile=”default” animation_type=”entrance” animation=”None” animation_movement_type=”transform_y” hover_animation=”none” alignment=”center” img_link_large=”yes” border_radius=”none” box_shadow=”none” image_loading=”default” margin_top=”30px”][\/vc_column][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” top_margin=”7%” bottom_margin=”7%” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” column_padding_type=”default” gradient_type=”default”][vc_column_text css=”” text_direction=”default”]\n

Step 1 \u2013 Command Injection via the SFTP Endpoint (CVE-2026-46746)<\/h3>\n

SINEC INS provides an SFTP module in the web interface that can be used to create and manage directories. The PATCH<\/strong> endpoint \/api\/sftp\/uploadFiles<\/strong> does not sufficiently validate the directory names passed to it. If an attacker creates a directory whose name contains a command substitution such as $(id)<\/strong>, this name is stored unchanged in the file system. The order is critical here. The command is not executed when the directory is created but is first persisted as a directory name. Only when the directory is listed via GET \/api\/sftp\/uploadFiles<\/strong> does the shell evaluate the command substitution. This constitutes a stored<\/em> command injection, which leads to command execution on the Linux system in the context of the service user `sinecins`<\/strong>. The only prerequisite is a web UI account whose role includes permissions for the SFTP module (specifically, ` sftpRights<\/strong> ` Level 2). However, such an account remains unprivileged; sinecins<\/strong> does not have root privileges at this point. Therefore, the second step in the chain is required to gain full control of the system.<\/p>\n

Step 2 \u2013 Privilege Escalation via Linux Capability (CVE-2026-46748)<\/h3>\n

The foothold as ” sinecins<\/strong> ” initially provides only the rights of an unprivileged service user. The actual privilege escalation is enabled by a configuration at the file system level: The binary ` \/opt\/sinecins\/bin\/sinecINSsftp<\/strong> ` is assigned the Linux capability ` cap_dac_override<\/strong> `, a case of Execution with Unnecessary Privileges<\/em> (CWE-250). Under Linux, Discretionary Access Control (DAC) determines which users are allowed to read, write, or execute which files. The cap_dac_override<\/strong> capability bypasses these checks. A process possessing this capability may read and write any file, regardless of the set permissions. The core of the misconfiguration lies in the fact that this privileged binary can be started by the unprivileged service user `sinecins<\/strong> ` with a freely selectable configuration. ` sinecINSsftp<\/strong> ` is an FTP server that accepts any configuration file via a command-line parameter. If an attacker starts the server with a custom configuration, the process is granted the capability upon startup. This allows the attacker to read and overwrite any system files using standard FTP operations. From there, it is a short path to root. The FTP server can be used to create a cron job that runs as root and opens a reverse shell for the attacker. It is also possible to exploit \/etc\/passwd<\/strong>: The attacker reads the file, adds a backdoor account with UID 0, and writes it back. Logging in with this account then immediately grants a root shell.[\/vc_column_text][vc_column_text css=”” text_direction=”default”]\n

The Big Picture<\/h3>\n

Taken in isolation, the individual vulnerabilities do not appear particularly critical: a stored command injection that initially affects only a service account, and a capability that can be exploited only locally. Together, however, they form a continuous attack chain from the authenticated web user all the way to root<\/strong> on a system that occupies a central position in the network.<\/p>\n

Additional Findings<\/h3>\n

In addition to the attack chain described above, two further vulnerabilities were identified. A path traversal<\/strong> in the SFTP module\u2019s directory listing (CVE-2026-46747) allows directories outside the intended path to be listed. In addition, the application\u2019s password hashing<\/strong> uses a static, hard-coded salt and an insufficient number of iterations (CVE-2026-46749), making password hashes significantly easier to attack. Both issues have also been fixed in Update 6.<\/p>\n

Conclusion<\/h2>\n
Network infrastructure components are often considered low priority in OT environments, even though their central position makes them a particularly attractive target for attacks. This case follows well-known patterns. The most critical scenarios rarely arise from a single vulnerability, but rather from a chain of vulnerabilities. Operators should therefore update <\/strong>to V1.0 SP2 Update 6 <\/strong>as soon as possible (see SSA-860189<\/a>) and consistently restrict access to SINEC-INS instances to authorized, segmented network zones. This case also underscores that security audits should not be limited to PLC and SCADA systems but must also include the underlying infrastructure software.<\/div>\n[\/vc_column_text][\/vc_column][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text css=”” text_direction=”default”]\n

Vendor Contact Timeline<\/strong><\/h3>\n[\/vc_column_text][divider line_type=”No Line” custom_height=”20 px”][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” row_position_desktop=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none”][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_raw_html css=””]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[\/vc_raw_html][\/vc_column][\/vc_row]\n","protected":false},"excerpt":{"rendered":"

[vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” row_position_desktop=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none”][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default”…<\/p>\n","protected":false},"author":16,"featured_media":17909,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[315],"tags":[],"class_list":["post-17910","post","type-post","status-publish","format-standard","has-post-thumbnail","category-advisories"],"_links":{"self":[{"href":"https:\/\/limessecurity.com\/en\/wp-json\/wp\/v2\/posts\/17910","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/limessecurity.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/limessecurity.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/limessecurity.com\/en\/wp-json\/wp\/v2\/users\/16"}],"replies":[{"embeddable":true,"href":"https:\/\/limessecurity.com\/en\/wp-json\/wp\/v2\/comments?post=17910"}],"version-history":[{"count":6,"href":"https:\/\/limessecurity.com\/en\/wp-json\/wp\/v2\/posts\/17910\/revisions"}],"predecessor-version":[{"id":17919,"href":"https:\/\/limessecurity.com\/en\/wp-json\/wp\/v2\/posts\/17910\/revisions\/17919"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/limessecurity.com\/en\/wp-json\/wp\/v2\/media\/17909"}],"wp:attachment":[{"href":"https:\/\/limessecurity.com\/en\/wp-json\/wp\/v2\/media?parent=17910"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/limessecurity.com\/en\/wp-json\/wp\/v2\/categories?post=17910"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/limessecurity.com\/en\/wp-json\/wp\/v2\/tags?post=17910"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}