Vulnerability · Published Jun 12, 2023 · Assigned by VulDB

CVE-2023-3206Chengdu VEC40G denial of service

Medium 5.3

In plain English

A medium-severity security flaw in VEC40G from Chengdu. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 18.7% (higher than 97% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)18.7%top 2.7% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A vulnerability classified as problematic was found in Chengdu VEC40G 3.0. Affected by this vulnerability is an unknown functionality of the file /send_order.cgi?parameter=restart. The manipulation of the argument restart with the input reboot leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231229 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
Chengdu	VEC40G	3.0

Weakness: CWE-404 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References

https://vuldb.com/?id.231229 vdb-entry, technical-description
https://vuldb.com/?ctiid.231229 signature, permissions-required
https://github.com/shulao2020/cve/blob/main/Flying%20Fish.md exploit