CVEDB API

On Crestron 3-Series Control Systems before 1.8001.0187, crafting and sending a specific BACnet packet can cause a crash.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 21.6%

CVSS Severity

CVSS v3 Score 7.5

References

Products affected by CVE-2023-38405

Crestron » Cp3-Gv 6506034 » Version: N/A

cpe:2.3:h:crestron:cp3-gv_6506034:-
Crestron » Cp3 6504877 » Version: N/A

cpe:2.3:h:crestron:cp3_6504877:-
Crestron » Cp3n 6505417 » Version: N/A

cpe:2.3:h:crestron:cp3n_6505417:-
Crestron » Cp3-Gv 6506034 Firmware » Version: N/A

cpe:2.3:o:crestron:cp3-gv_6506034_firmware:-
Crestron » Cp3 6504877 Firmware » Version: N/A

cpe:2.3:o:crestron:cp3_6504877_firmware:-
Crestron » Cp3n 6505417 Firmware » Version: N/A

cpe:2.3:o:crestron:cp3n_6505417_firmware:-