CVE-2023-48430

CVSS 3.1 Score 2.7 of 10 (low)

Details

Published Dec 12, 2023
Updated: Dec 14, 2023
CWE ID 392

Summary

CVE-2023-48430 is a vulnerability in SINEC INS software, specifically affecting all versions before V1.0 SP2 Update 2. The vulnerability lies in the REST API of the affected devices, which fails to check the length of parameters under certain conditions. This flaw can be exploited by a malicious administrator to crash the server by sending a specially crafted request to the API, resulting in an automatic restart of the server. The vulnerability has a risk score of 5 and a base severity rating of LOW according to NIST. The potential danger posed to an organization includes disruption of service availability but does not impact confidentiality or integrity. It is recommended to update affected devices to V1.0 SP2 Update 2 or newer versions in order to remediate this vulnerability.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-48430 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options