Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gv5r-5x6r-p8j8

Опубликовано: 12 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected software does not correctly validate the response received by an UMC server. An attacker can use this to crash the affected software by providing and configuring a malicious UMC server or by manipulating the traffic from a legitimate UMC server (i.e. leveraging CVE-2023-48427).

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected software does not correctly validate the response received by an UMC server. An attacker can use this to crash the affected software by providing and configuring a malicious UMC server or by manipulating the traffic from a legitimate UMC server (i.e. leveraging CVE-2023-48427).

EPSS

Процентиль: 38%
0.0017
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-754

Связанные уязвимости

CVSS3: 6.8
nvd
около 2 лет назад

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected software does not correctly validate the response received by an UMC server. An attacker can use this to crash the affected software by providing and configuring a malicious UMC server or by manipulating the traffic from a legitimate UMC server (i.e. leveraging CVE-2023-48427).

EPSS

Процентиль: 38%
0.0017
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-754