Vulnerability · Published Oct 2, 2023 · Assigned by INCIBE
CVE-2023-3768Vulnerability in Ingeteam's INGEPAC EF/DA
High 8.6
In plain English
A high-severity improper input validation in INGEPAC DA3451 from Ingeteam. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).
Official description
Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuzzing techniques that would allow him to gain knowledge about specially crafted packets that would create a DoS condition through the MMS protocol when initiating communication, achieving a complete system reboot of the device and its services.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Ingeteam | INGEPAC DA3451 | 0.29.2.42 |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H