INCIBEVULNRICHMENT:CVE-2023-3769CVE-2023-3769 Vulnerability in Ingeteam's INGEPAC EF
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
AI Score
Confidence
Low
SSVC
Exploitation
none
Automatable
yes
Technical Impact
partial
Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuzzing techniques that would allow him to gain knowledge about specially crafted packets that would create a DoS condition through the MMS protocol when initiating communication, achieving a complete system reboot of the device and its services.
ADP Affected
[
{
"cpes": [
"cpe:2.3:h:ingeteam:ingepac_fc5066:-:*:*:*:*:*:*:*"
],
"vendor": "ingeteam",
"product": "ingepac_fc5066",
"versions": [
{
"status": "affected",
"version": "9.0.22.6+6.1.1.22+5.3.1.1"
}
],
"defaultStatus": "unaffected"
}
]Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
AI Score
Confidence
Low
SSVC
Exploitation
none
Automatable
yes
Technical Impact
partial