| |
Vulnerability CVE-2023-48428
Published: 2023-12-12 Modified: 2023-12-14
| Description: |
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The radius configuration mechanism of affected products does not correctly check uploaded certificates. A malicious admin could upload a crafted certificate resulting in a denial-of-service condition or potentially issue commands on system level. |
Type:
CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
)
References: |
https://cert-portal.siemens.com/productcert/pdf/ssa-077170.pdf
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
