Siemens SINEC INS
SINEC INS before V1.0 SP2 Update 2 is affected by multiple vulnerabilities. Siemens has released an update for SINEC INS and recommends to update to the latest version.
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-48431US | high8.6 | — | ||
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected software does not correctly validate the response received by an UMC server. An attack… | ||||
| CVE-2023-48430US | low2.7 | — | ||
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The REST API of affected devices does not check the length of parameters in certain conditions.… | ||||
| CVE-2023-48429US | — | — | ||
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The Web UI of affected devices does not check the length of parameters in certain conditions. T… | ||||
| CVE-2023-48428US | — | — | ||
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The radius configuration mechanism of affected products does not correctly check uploaded certi… | ||||
| CVE-2023-48427US | critical9.8 | — | ||
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected products do not properly validate the certificate of the configured UMC server. This c… | ||||
| CVE-2023-27538US | medium5.5 | — | ||
An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, w… | ||||
| CVE-2023-0464US | high7.5 | Exploit | ||
A security vulnerability has been identified in all supported versions
of OpenSSL related to the verification of X.509 certificate chains
that include policy constraints. Attacke… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-077170: Multiple Vulnerabilities in SINEC INS before V1.0 SP2 Update 2 - CSAF Versionself
- SSA-077170: Multiple Vulnerabilities in SINEC INS before V1.0 SP2 Update 2 - HTML Versionself
- SSA-077170: Multiple Vulnerabilities in SINEC INS before V1.0 SP2 Update 2 - PDF Versionself
- SSA-077170: Multiple Vulnerabilities in SINEC INS before V1.0 SP2 Update 2 - TXT Versionself
- ICS Advisory ICSA-23-348-16 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-348-16 - Web Versionself
- Recommended Practicesexternal
Behebungen (14)
- BehobenSINEC INS
Update to V1.0 SP2 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825710/ - BehobenSINEC INS
Update to V1.0 SP2 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825710/ - BehobenSINEC INS
Update to V1.0 SP2 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825710/ - BehobenSINEC INS
Update to V1.0 SP2 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825710/ - BehobenSINEC INS
Update to V1.0 SP2 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825710/ - BehobenSINEC INS
Update to V1.0 SP2 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825710/ - BehobenSINEC INS
Update to V1.0 SP2 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825710/ - WorkaroundSINEC INS
Restrict access to application webserver for trusted users only
- WorkaroundSINEC INS
Restrict access to application webserver for trusted users only
- WorkaroundSINEC INS
Restrict access to application webserver for trusted users only
- WorkaroundSINEC INS
Restrict access to application webserver for trusted users only
- WorkaroundSINEC INS
Restrict access to application webserver for trusted users only
- WorkaroundSINEC INS
Restrict access to application webserver for trusted users only
- WorkaroundSINEC INS
Restrict access to application webserver for trusted users only
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan