Lucene search

INCIBECVELIST:CVE-2023-3769

HistoryOct 02, 2023 - 1:01 p.m.

CVE-2023-3769 Vulnerability in Ingeteam's INGEPAC EF

2023-10-0213:01:03

CWE-20

INCIBE

www.cve.org

cve-2023-3769

incorrect data input validation

network access

fuzzing techniques

dos condition

mms protocol

system reboot

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

23.6%

JSON

Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuzzing techniques that would allow him to gain knowledge about specially crafted packets that would create a DoS condition through the MMS protocol when initiating communication, achieving a complete system reboot of the device and its services.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "INGEPAC FC5066",
    "vendor": "Ingeteam",
    "versions": [
      {
        "status": "affected",
        "version": "9.0.22.6+6.1.1.22+5.3.1.1"
      }
    ]
  }
]

References

www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ingeteam-products

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

23.6%

JSON

Related for CVELIST:CVE-2023-3769