CVE-2023-48427 Security feature bypass in SINEC INS
Attackers can intercept credentials and manipulate responses by bypassing certificate validation, potentially escalating privileges in Siemens SINEC INS.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-48427?
CVE-2023-48427 is a high-severity vulnerability in Siemens SINEC INS, published on 12 Dec 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected products do not properly validate the certificate of the configured UMC server. This could allow an attacker to intercept credentials that are sent to the UMC server as well as to manipulate responses, potentially allowing an attacker to escalate privileges.
Weakness: CWE-295
Which versions are affected by CVE-2023-48427?
It affects 1 product.
Products include Siemens Sinec Ins.
How do I fix CVE-2023-48427?
No fix has been published for CVE-2023-48427 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-48427 being exploited?
There is no known exploitation of CVE-2023-48427 in the wild and no public exploit code.
Other vulnerabilities in Siemens SINEC INS
Sources
Also known as GHSA-ffrg-8pgr-8693.