CVE-2023-48429

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The Web UI of affected devices does not check the length of parameters in certain conditions. This allows a malicious admin to crash the server by sending a crafted request to the server. The server will automatically restart.

• CWE-394
• CWE-754

• https://cert-portal.siemens.com/productcert/pdf/ssa-077170.pdfPatch, Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-077170.pdfPatch, Vendor Advisory

Published

Dec 12, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-48423In dhcp4_SetPDNAddress of dhcp4_Main.c, there is a possible …9.8
• CVE-2023-48424U-Boot shell vulnerability resulting in Privilege escalation…9.8
• CVE-2023-48425U-Boot vulnerability resulting in persistent Code Execution 9.8
• CVE-2023-48426u-boot bug that allows for u-boot shell and interrupt over U…10
• CVE-2023-48427A vulnerability has been identified in SINEC INS (All versio…9.8
• CVE-2023-48428A vulnerability has been identified in SINEC INS (All versio…7.2
• CVE-2023-4843Pega Platform versions 7.1 to 8.8.3 are affected by an HTML …4.8
• CVE-2023-48430A vulnerability has been identified in SINEC INS (All versio…2.7
• CVE-2023-48431A vulnerability has been identified in SINEC INS (All versio…8.6
• CVE-2023-48432An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15…6.1
• CVE-2023-48433Online Voting System Project v1.0 is vulnerable to multiple …9.8
• CVE-2023-48434Online Voting System Project v1.0 is vulnerable to multiple …9.8