CVE-2026-46748: A vulnerability has been identified in SINEC INS (All versions < V1

Synopsis

A privilege escalation vulnerability exists in Siemens SINEC INS affecting all versions before V1.0 SP2 Update 6. A local attacker with a low-privilege account can exploit a misconfigured binary that holds the cap_dac_override Linux capability, which allows the process to bypass all file system permission checks. Successful exploitation gives the attacker full read, write, and execute access across the file system, enabling them to gain root privileges on the affected host. A patched-image rebuild at V1.0 SP2 Update 6 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityNot required

  The attacker needs an existing shell or process on the host; no network access to the service is required to trigger the vulnerability.

• AuthenticationRequired

  Any low-privilege local account is sufficient; no administrative credentials are needed to invoke the misconfigured binary.

• Victim interactionNot required

  No user interaction is required; the attacker can exploit the misconfigured capability entirely without involving another user.

• Attack complexityDetail

  The exploit is reliable and condition-free; no race conditions, special memory layout, or environmental prerequisites are required beyond local access.

Blast Radius

• Attacker reads arbitrary files across the entire file system, including credential stores, private keys, and application secrets.
• Attacker writes or overwrites arbitrary files, including system binaries and configuration files.
• Attacker escalates to root privileges, gaining full control of the operating system and all processes running on the host.
• All three integrity, confidentiality, and availability dimensions of the local system are fully compromised once root is obtained.