Summary
SINEC INS before V1.0 SP2 Update 2 is affected by multiple vulnerabilities.
Siemens has released an update for SINEC INS and recommends to update to the latest version.
Vulnerabilities 7
-
High 8.1
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected products do not properly …
-
High 7.7
An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH c…
-
High 7.5CVE-2023-0464 Public exploit
Excessive Resource Usage Verifying X.509 Policy Constraints
A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate …
-
High 7.2
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The radius configuration mechanism…
-
Medium 6.8
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected software does not correct…
-
Low 2.7
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The Web UI of affected devices doe…
-
Low 2.7
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The REST API of affected devices d…
Revision history
-
#1
Publication Date
References
-
SSA-077170: Multiple Vulnerabilities in SINEC INS before V1.0 SP2 Update 2 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-077170.html
-
SSA-077170: Multiple Vulnerabilities in SINEC INS before V1.0 SP2 Update 2 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-077170.pdf
-
SSA-077170: Multiple Vulnerabilities in SINEC INS before V1.0 SP2 Update 2 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-077170.txt