Vulnerability Description
Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuzzing techniques that would allow him to gain knowledge about specially crafted packets that would create a DoS condition through the MMS protocol when initiating communication, achieving a complete system reboot of the device and its services.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ingeteam | Ingepac Da3451 Firmware | - |
| Ingeteam | Ingepac Da3451 | - |
| Ingeteam | Ingepac Ef Md Firmware | - |
| Ingeteam | Ingepac Ef Md | - |
| Ingeteam | Ingepac Fc5066 Firmware | - |
| Ingeteam | Ingepac Fc5066 | - |
Related Weaknesses (CWE)
References
- https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-Third Party Advisory
- https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-Third Party Advisory
FAQ
What is CVE-2023-3768?
CVE-2023-3768 is a vulnerability with a CVSS score of 8.6 (HIGH). Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuzzing techniques that would allow him to gain knowledge about specially crafted p...
How severe is CVE-2023-3768?
CVE-2023-3768 has been rated HIGH with a CVSS base score of 8.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-3768?
Check the references section above for vendor advisories and patch information. Affected products include: Ingeteam Ingepac Da3451 Firmware, Ingeteam Ingepac Da3451, Ingeteam Ingepac Ef Md Firmware, Ingeteam Ingepac Ef Md, Ingeteam Ingepac Fc5066 Firmware.