# CVE-2026-46749: Siemens SINEC INS weak password hashing using hardcoded salt

Source: https://junglewise.ai/threats/cve-2026-46749-siemens-sinec-ins-weak-password-hashing-using-hardcoded-salt  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-09. Updated: 2026-06-09  
License: CC BY 4.0 with a link back

CVE-2026-46749 · Severity: high · CVSS 7.5 · Published 2026-06-09

Siemens SINEC INS, a tool used to manage industrial network services, uses a weak method for protecting user passwords. Because the system uses a single shared secret and low-security settings to scramble passwords, an attacker with access to the system could more easily crack those passwords. This could lead to unauthorized access to the network management tool and potential disruption of industrial operations.

Technologies: [Siemens Sinec Ins](https://junglewise.ai/threats/technologies/sinec-ins). Vendors: [Siemens](https://junglewise.ai/threats/vendors/siemens).

## Quick answers

**Is CVE-2026-46749 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-46749 being exploited in the wild.

**How severe is CVE-2026-46749?** High severity, with a CVSS score of 7.5, published 9 June 2026.

**Which products and versions are affected?** Siemens Sinec Ins All versions < V1.0 SP2 Update 6.

**Is there a fix for CVE-2026-46749?** A patch was published on 2026-06-09: Fixed in V1.0 SP2 Update 6 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-46749 attacked?** It is attacked with local access, in a network appliance.

**Am I affected by CVE-2026-46749?** Check whether you run Siemens Sinec Ins at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability (CWE-760) exists in the password hashing mechanism of Siemens SINEC INS. The application utilizes a static, hardcoded salt that is identical across all user accounts and installations, combined with a low iteration count for the hashing algorithm. An attacker with local access and high privileges could exploit this to perform offline brute-force or rainbow table attacks to recover plaintext passwords. This is particularly dangerous in environments where the same credentials might be reused across different systems. Siemens has addressed this in SINEC INS V1.0 SP2 Update 6.

## Affected products

- Siemens SINEC INS All versions < V1.0 SP2 Update 6

## Timeline

- 2026-06-09: disclosed
- 2026-06-09: advisory
- 2026-06-09: patched: Fixed in V1.0 SP2 Update 6

## References

- [https://cert-portal.siemens.com/productcert/html/ssa-860189.html](https://cert-portal.siemens.com/productcert/html/ssa-860189.html)

## Related threats

- [Siemens SINEC INS privilege escalation via cap_dac_override binary](https://junglewise.ai/threats/cve-2026-46748-siemens-sinec-ins-privilege-escalation-via-cap-dac-override)
- [Siemens SINEC INS path traversal in SFTP uploadFiles endpoint](https://junglewise.ai/threats/cve-2026-46747-siemens-sinec-ins-path-traversal-in-sftp-uploadfiles-endpoint)
- [Siemens SINEC INS OS command injection in SFTP upload endpoint](https://junglewise.ai/threats/cve-2026-46746-siemens-sinec-ins-os-command-injection-in-sftp-upload-endpoint)