CVE-2023-48430
CVSS 3.1 Score 2.7 of 10 (low)
Details
Summary
CVE-2023-48430 is a vulnerability in SINEC INS software, specifically affecting all versions before V1.0 SP2 Update 2. The vulnerability lies in the REST API of the affected devices, which fails to check the length of parameters under certain conditions. This flaw can be exploited by a malicious administrator to crash the server by sending a specially crafted request to the API, resulting in an automatic restart of the server. The vulnerability has a risk score of 5 and a base severity rating of LOW according to NIST. The potential danger posed to an organization includes disruption of service availability but does not impact confidentiality or integrity. It is recommended to update affected devices to V1.0 SP2 Update 2 or newer versions in order to remediate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions