8.6
CVE-2023-3769
- EPSS 0.06%
- Veröffentlicht 02.10.2023 14:15:10
- Zuletzt bearbeitet 21.11.2024 08:18:01
- Quelle cve-coordination@incibe.es
- CVE-Watchlists
- Unerledigt
LoginIncorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuzzing techniques that would allow him to gain knowledge about specially crafted packets that would create a DoS condition through the MMS protocol when initiating communication, achieving a complete system reboot of the device and its services.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ingeteam ≫ Ingepac Fc5066 Firmware Version5.3.1.1
Ingeteam ≫ Ingepac Fc5066 Firmware Version6.1.1.22
Ingeteam ≫ Ingepac Fc5066 Firmware Version9.0.22.6
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.06% | 0.176 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| cve-coordination@incibe.es | 8.6 | 3.9 | 4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.