8.6
CVE-2023-3768
- EPSS 0.56%
- Veröffentlicht 02.10.2023 11:15:50
- Zuletzt bearbeitet 21.11.2024 08:18:01
- Quelle cve-coordination@incibe.es
- CVE-Watchlists
- Unerledigt
LoginVulnerability in Ingeteam's INGEPAC EF/DA
Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuzzing techniques that would allow him to gain knowledge about specially crafted packets that would create a DoS condition through the MMS protocol when initiating communication, achieving a complete system reboot of the device and its services.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ingeteam ≫ Ingepac Da3451 Firmware Version-
Ingeteam ≫ Ingepac Ef Md Firmware Version-
Ingeteam ≫ Ingepac Fc5066 Firmware Version-
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.56% | 0.419 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| cve-coordination@incibe.es | 8.6 | 3.9 | 4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ingeteam-products