7.5

CVE-2023-3768

Vulnerability in Ingeteam's INGEPAC EF/DA

Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuzzing techniques that would allow him to gain knowledge about specially crafted packets that would create a DoS condition through the MMS protocol when initiating communication, achieving a complete system reboot of the device and its services.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ingeteam ≫ Ingepac Da3451 Firmware Version -
   Ingeteam ≫ Ingepac Da3451 Version -
Ingeteam ≫ Ingepac Ef Md Firmware Version -
   Ingeteam ≫ Ingepac Ef Md Version -
Ingeteam ≫ Ingepac Fc5066 Firmware Version -
   Ingeteam ≫ Ingepac Fc5066 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.56% 0.419
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
cve-coordination@incibe.es 8.6 3.9 4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ingeteam-products
Third Party Advisory