Total vulnerabilities in the database
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The REST API of affected devices does not check the length of parameters in certain conditions. This allows a malicious admin to crash the server by sending a crafted request to the API. The server will automatically restart.
| Software | From | Fixed in |
|---|---|---|
| siemens / sinec_ins | 1.0-sp1 | 1.0-sp1.x |
| siemens / sinec_ins | - | 1.0 |
| siemens / sinec_ins | 1.0 | 1.0.x |
| siemens / sinec_ins | 1.0-sp2 | 1.0-sp2.x |
| siemens / sinec_ins | 1.0-sp2_update_1 | 1.0-sp2_update_1.x |