Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected software does not correctly validate the response received by an UMC server. An attacker can use this to crash the affected software by providing and configuring a malicious UMC server or by manipulating the traffic from a legitimate UMC server (i.e. leveraging CVE-2023-48427).
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
Vulnerability Type
对因果或异常条件的不恰当检查
Vulnerability Title
Siemens SINEC INS 代码问题漏洞
Vulnerability Description
Siemens SINEC INS是德国西门子（Siemens）公司的一款为网络基础设施提供中央服务的软件。 Siemens SINEC INS 存在代码问题漏洞，该漏洞源于无法正确验证 UMC 服务器收到的响应。
CVSS Information
N/A
Vulnerability Type
N/A