LOW🇵🇱 Wersja polska

CVE-2023-48429

CVSS 2.7v3.1pub. 2023-12-12upd. 2024-11-21

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The Web UI of affected devices does not check the length of parameters in certain conditions. This allows a malicious admin to crash the server by sending a crafted request to the server. The server will automatically restart.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

  • Siemens Sinec Ins

    APP
    Siemens
    1.0< 1.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-46888CRITICAL9.4PL ✓same product

Path Traversal w SINEC INS umożliwia RCE przez SFTP

CVE-2024-46890CRITICAL9.4PL ✓same product

Command injection w Siemens SINEC INS – wykonanie kodu na systemie operacyjnym

CVE-2022-45092CRITICAL9.9PL ✓same product

Path Traversal w Siemens SINEC INS umożliwiający RCE

CVE-2022-35255CRITICAL9.1PL ✓same product

Słaba losowość w generowaniu kluczy WebCrypto w Node.js 18

CVE-2021-22945CRITICAL9.1PL ✓same product

Double-free w libcurl przy wysyłaniu danych do serwera MQTT