| |
Podatność CVE-2023-48428
Publikacja: 2023-12-12 Modyfikacja: 2023-12-14
| Opis: |
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The radius configuration mechanism of affected products does not correctly check uploaded certificates. A malicious admin could upload a crafted certificate resulting in a denial-of-service condition or potentially issue commands on system level. |
Typ:
CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
)
Referencje: |
https://cert-portal.siemens.com/productcert/pdf/ssa-077170.pdf
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
Polish
English