Vulnerability Details CVE-2023-36669
Missing Authentication for a Critical Function within the Kratos NGC Indoor Unit (IDU) before 11.4 allows remote attackers to obtain arbitrary control of the IDU/ODU system. Any attacker with layer-3 network access to the IDU can impersonate the Touch Panel Unit (TPU) within the IDU by sending crafted TCP requests to the IDU.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 44.4%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2023-36669
-
cpe:2.3:h:kratosdefense:ngc_indoor_unit:-
-
cpe:2.3:o:kratosdefense:ngc_indoor_unit_firmware:-
-
cpe:2.3:o:kratosdefense:ngc_indoor_unit_firmware:9.1.0.4