{"id":"CVE-2023-48428","aliases":["EUVD-2023-52479","GHSA-3727-x5w3-xwrr"],"status":"published","title":"A vulnerability has been identified in SINEC INS (All versions \u003c V1.0 SP2 Update 2). The radius...","description":"A vulnerability has been identified in SINEC INS (All versions \u003c V1.0 SP2 Update 2). The radius configuration mechanism of affected products does not correctly check uploaded certificates. A malicious admin could upload a crafted certificate resulting in a denial-of-service condition or potentially issue commands on system level.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0059,"percentile":0.48511,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2023-12-12T11:27:19Z","modified":"2026-06-17T06:34:14Z","products":[{"vendor":"siemens","product":"sinec ins"},{"vendor":"siemens","product":"sinec_ins"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-077170.pdf","tags":["x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-48428"},{"url":"https://github.com/advisories/GHSA-3727-x5w3-xwrr"}],"sources":{"cve":[{"id":"CVE-2023-48428","description":"A vulnerability has been identified in SINEC INS (All versions \u003c V1.0 SP2 Update 2). The radius configuration mechanism of affected products does not correctly check uploaded certificates. A malicious admin could upload a crafted certificate resulting in a denial-of-service condition or potentially issue commands on system level.","status":"published","published":"2023-12-12T11:27:19.59Z","modified":"2026-02-25T16:34:35.052Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high","assessor":"cna"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:35:25.866071Z"}],"euvd":[{"id":"EUVD-2023-52479","description":"A vulnerability has been identified in SINEC INS (All versions \u003c V1.0 SP2 Update 2). The radius configuration mechanism of affected products does not correctly check uploaded certificates. A malicious admin could upload a crafted certificate resulting in a denial-of-service condition or potentially issue commands on system level.","status":"published","published":"2023-12-12T11:27:19Z","modified":"2026-02-25T16:34:35Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T19:48:29.128374Z"}],"ghsa":[{"id":"GHSA-3727-x5w3-xwrr","title":"A vulnerability has been identified in SINEC INS (All versions \u003c V1.0 SP2 Update 2). The radius...","description":"A vulnerability has been identified in SINEC INS (All versions \u003c V1.0 SP2 Update 2). The radius configuration mechanism of affected products does not correctly check uploaded certificates. A malicious admin could upload a crafted certificate resulting in a denial-of-service condition or potentially issue commands on system level.","status":"published","published":"2023-12-12T12:30:54Z","modified":"2023-12-12T12:31:02Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:55:10.896568Z"}],"nvd":[{"id":"CVE-2023-48428","description":"A vulnerability has been identified in SINEC INS (All versions \u003c V1.0 SP2 Update 2). The radius configuration mechanism of affected products does not correctly check uploaded certificates. A malicious admin could upload a crafted certificate resulting in a denial-of-service condition or potentially issue commands on system level.","status":"published","published":"2023-12-12T12:15:14.873Z","modified":"2026-06-17T06:34:14.353Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:08:54.010507Z"}]}}