LOW🇵🇱 Wersja polska

CVE-2023-48430

CVSS 2.7v3.1pub. 2023-12-12upd. 2024-11-21

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The REST API of affected devices does not check the length of parameters in certain conditions. This allows a malicious admin to crash the server by sending a crafted request to the API. The server will automatically restart.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

  • Siemens Sinec Ins

    APP
    Siemens
    1.0< 1.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-46888CRITICAL9.4PL ✓ten sam produkt

Path Traversal w SINEC INS umożliwia RCE przez SFTP

CVE-2024-46890CRITICAL9.4PL ✓ten sam produkt

Command injection w Siemens SINEC INS – wykonanie kodu na systemie operacyjnym

CVE-2022-45092CRITICAL9.9ten sam produkt

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1). An authenticated remote a...

CVE-2022-35255CRITICAL9.1ten sam produkt

A weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with EntropySource() ...

CVE-2021-22945CRITICAL9.1ten sam produkt

When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep...