{"id":"CVE-2023-48431","aliases":["EUVD-2023-52482","GHSA-gv5r-5x6r-p8j8"],"status":"published","title":"A vulnerability has been identified in SINEC INS (All versions \u003c V1.0 SP2 Update 2). Affected...","description":"A vulnerability has been identified in SINEC INS (All versions \u003c V1.0 SP2 Update 2). Affected software does not correctly validate the response received by an UMC server. An attacker can use this to crash the affected software by providing and configuring a malicious UMC server or by manipulating the traffic from a legitimate UMC server (i.e. leveraging CVE-2023-48427).","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00616,"percentile":0.49824,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-754"],"published":"2023-12-12T11:27:23Z","modified":"2026-06-17T06:34:14Z","products":[{"vendor":"siemens","product":"sinec ins"},{"vendor":"siemens","product":"sinec_ins"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-077170.pdf","tags":["x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-48431"},{"url":"https://github.com/advisories/GHSA-gv5r-5x6r-p8j8"}],"sources":{"cve":[{"id":"CVE-2023-48431","description":"A vulnerability has been identified in SINEC INS (All versions \u003c V1.0 SP2 Update 2). Affected software does not correctly validate the response received by an UMC server. An attacker can use this to crash the affected software by providing and configuring a malicious UMC server or by manipulating the traffic from a legitimate UMC server (i.e. leveraging CVE-2023-48427).","status":"published","published":"2023-12-12T11:27:23.326Z","modified":"2024-08-02T21:30:35.087Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C","level":"medium","assessor":"cna"}],"cwes":["CWE-754"],"updated_at":"2026-11-02T14:35:25.866071Z"}],"euvd":[{"id":"EUVD-2023-52482","description":"A vulnerability has been identified in SINEC INS (All versions \u003c V1.0 SP2 Update 2). Affected software does not correctly validate the response received by an UMC server. An attacker can use this to crash the affected software by providing and configuring a malicious UMC server or by manipulating the traffic from a legitimate UMC server (i.e. leveraging CVE-2023-48427).","status":"published","published":"2023-12-12T11:27:23Z","modified":"2024-08-02T21:30:35Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C","level":"medium"}],"updated_at":"2026-11-03T03:49:57.383318Z"}],"ghsa":[{"id":"GHSA-gv5r-5x6r-p8j8","title":"A vulnerability has been identified in SINEC INS (All versions \u003c V1.0 SP2 Update 2). Affected...","description":"A vulnerability has been identified in SINEC INS (All versions \u003c V1.0 SP2 Update 2). Affected software does not correctly validate the response received by an UMC server. An attacker can use this to crash the affected software by providing and configuring a malicious UMC server or by manipulating the traffic from a legitimate UMC server (i.e. leveraging CVE-2023-48427).","status":"published","published":"2023-12-12T12:30:54Z","modified":"2023-12-12T12:31:02Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-754"],"updated_at":"2026-11-02T14:55:10.896568Z"}],"nvd":[{"id":"CVE-2023-48431","description":"A vulnerability has been identified in SINEC INS (All versions \u003c V1.0 SP2 Update 2). Affected software does not correctly validate the response received by an UMC server. An attacker can use this to crash the affected software by providing and configuring a malicious UMC server or by manipulating the traffic from a legitimate UMC server (i.e. leveraging CVE-2023-48427).","status":"published","published":"2023-12-12T12:15:15.777Z","modified":"2026-06-17T06:34:14.737Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-754"],"updated_at":"2026-11-02T14:08:54.010507Z"}]}}