CVE-2023-48427
Last modified
CVE-2023-48427 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected products do not properly validate the certificate of the configured UMC server. EPSS estimates a 0.38% chance of exploitation in the next 30 days.
Description
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected products do not properly validate the certificate of the configured UMC server. This could allow an attacker to intercept credentials that are sent to the UMC server as well as to manipulate responses, potentially allowing an attacker to escalate privileges.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Sinec Ins | < 1.0 |
| Siemens | Sinec Ins | 1.0 |
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-077170.pdfPatch, Vendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-077170.pdfPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-48427?
How severe is CVE-2023-48427?
How do I fix CVE-2023-48427?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-48421In gpu_pixel_handle_buffer_liveness_update_ioctl of private/…7.8
- CVE-2023-48422In Init of protocolnetadapter.cpp, there is a possible out o…5.5
- CVE-2023-48423In dhcp4_SetPDNAddress of dhcp4_Main.c, there is a possible …9.8
- CVE-2023-48424U-Boot shell vulnerability resulting in Privilege escalation…9.8
- CVE-2023-48425U-Boot vulnerability resulting in persistent Code Execution 9.8
- CVE-2023-48426u-boot bug that allows for u-boot shell and interrupt over U…10
- CVE-2023-48428A vulnerability has been identified in SINEC INS (All versio…7.2
- CVE-2023-48429A vulnerability has been identified in SINEC INS (All versio…2.7
- CVE-2023-4843Pega Platform versions 7.1 to 8.8.3 are affected by an HTML …4.8
- CVE-2023-48430A vulnerability has been identified in SINEC INS (All versio…2.7
- CVE-2023-48431A vulnerability has been identified in SINEC INS (All versio…8.6
- CVE-2023-48432An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15…6.1
Are you affected by CVE-2023-48427?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST