7.5

CVE-2023-38405

On Crestron 3-Series Control Systems before 1.8001.0187, crafting and sending a specific BACnet packet can cause a crash.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Crestron ≫ Cp3n 6505417 Firmware Version < 1.8001.0187
   Crestron ≫ Cp3n 6505417 Version-
Crestron ≫ Cp3 6504877 Firmware Version < 1.8001.0187
   Crestron ≫ Cp3 6504877 Version-
Crestron ≫ Cp3-gv 6506034 Firmware Version < 1.8001.0187
   Crestron ≫ Cp3-gv 6506034 Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.52% 0.397
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

https://www.crestron.com/release_notes/cp3n_1.8001.0187_release_notes.pdf
Release Notes