CVE-2023-48431 Denial of service in SINEC INS

What is CVE-2023-48431?

CVE-2023-48431 is a medium-severity denial of service vulnerability in Siemens SINEC INS, published on 12 Dec 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected software does not correctly validate the response received by an UMC server. An attacker can use this to crash the affected software by providing and configuring a malicious UMC server or by manipulating the traffic from a legitimate UMC server (i.e. leveraging CVE-2023-48427).

Weakness: CWE-754

Which versions are affected by CVE-2023-48431?

It affects 1 product.

Products include Siemens Sinec Ins.

How do I fix CVE-2023-48431?

No fix has been published for CVE-2023-48431 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2023-48431 being exploited?

There is no known exploitation of CVE-2023-48431 in the wild and no public exploit code.

Other vulnerabilities in Siemens SINEC INS

• CVE-2022-45092 Path traversal in SINEC INS Critical 9.9
• CVE-2024-46888 Path traversal in SINEC INS Critical 9.4
• CVE-2024-46890 Command injection in SINEC INS Critical 9.4
• CVE-2026-46746 Command injection in SINEC INS High 8.7
• CVE-2026-46748 Privilege escalation in SINEC INS High 8.7

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-gv5r-5x6r-p8j8.