SSA-077170: Multiple Vulnerabilities in SINEC INS before V1.0 SP2 Update 2
SINEC INS before V1.0 SP2 Update 2 is affected by multiple vulnerabilities. Siemens has released an update for SINEC INS and recommends to update to the latest version.
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-48431US | high8.6 | — | ||
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected software does not correctly validate the response received by an UMC server. An attack… | ||||
| CVE-2023-48430US | low2.7 | — | ||
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The REST API of affected devices does not check the length of parameters in certain conditions.… | ||||
| CVE-2023-48429US | — | — | ||
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The Web UI of affected devices does not check the length of parameters in certain conditions. T… | ||||
| CVE-2023-48428US | — | — | ||
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The radius configuration mechanism of affected products does not correctly check uploaded certi… | ||||
| CVE-2023-48427US | critical9.8 | — | ||
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected products do not properly validate the certificate of the configured UMC server. This c… | ||||
| CVE-2023-27538US | medium5.5 | — | ||
An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, w… | ||||
| CVE-2023-0464US | high7.5 | Exploit | ||
A security vulnerability has been identified in all supported versions
of OpenSSL related to the verification of X.509 certificate chains
that include policy constraints. Attacke… | ||||
references
External citations — patches, advisories, analysis.
- SSA-077170: Multiple Vulnerabilities in SINEC INS before V1.0 SP2 Update 2 - CSAF Versionself
- SSA-077170: Multiple Vulnerabilities in SINEC INS before V1.0 SP2 Update 2 - HTML Versionself
- SSA-077170: Multiple Vulnerabilities in SINEC INS before V1.0 SP2 Update 2 - PDF Versionself
- SSA-077170: Multiple Vulnerabilities in SINEC INS before V1.0 SP2 Update 2 - TXT Versionself
remediations (14)
- FixedSINEC INS
Update to V1.0 SP2 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825710/ - FixedSINEC INS
Update to V1.0 SP2 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825710/ - FixedSINEC INS
Update to V1.0 SP2 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825710/ - FixedSINEC INS
Update to V1.0 SP2 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825710/ - FixedSINEC INS
Update to V1.0 SP2 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825710/ - FixedSINEC INS
Update to V1.0 SP2 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825710/ - FixedSINEC INS
Update to V1.0 SP2 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825710/ - WorkaroundSINEC INS
Restrict access to application webserver for trusted users only
- WorkaroundSINEC INS
Restrict access to application webserver for trusted users only
- WorkaroundSINEC INS
Restrict access to application webserver for trusted users only
- WorkaroundSINEC INS
Restrict access to application webserver for trusted users only
- WorkaroundSINEC INS
Restrict access to application webserver for trusted users only
- WorkaroundSINEC INS
Restrict access to application webserver for trusted users only
- WorkaroundSINEC INS
Restrict access to application webserver for trusted users only
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan