Siemens SINEC INS

An authenticated attacker with engineering workstation access could execute arbitrary commands on SINEC INS with high privileges, potentially compromising network configuration, user management, or safety system monitoring across your industrial network.

Utilities and industrial plants using SINEC INS for network management and configuration of Siemens industrial control systems, including water treatment facilities, power distribution networks, and manufacturing plants that rely on SINEC INS for device provisioning and monitoring.

An attacker with valid credentials to SINEC INS (a network configuration and management system) could exploit command injection or privilege escalation vulnerabilities to execute arbitrary operating system commands on the SINEC INS server. This could allow modification of network settings, user accounts, or monitoring parameters that affect connected industrial devices.