Siemens Sinec Ins vulnerabilities, page 3

42 vulnerabilities

Known vulnerabilities in Siemens Sinec Ins, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

2.7CVE-2023-48430siemenssinec_ins
EPSS score
0.58%
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The REST API of affected devices does not check the length of parameters in certain conditions. This allows a malicious admin to crash the server by sending a crafted request to the API. The server will automatically restart.7.5CVE-2023-44487akkahttp_server+704KEV
EPSS score
100.00%
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.