CVE-2023-36669
18.07.2023, 18:15
Missing Authentication for a Critical Function within the Kratos NGC Indoor Unit (IDU) before 11.4 allows remote attackers to obtain arbitrary control of the IDU/ODU system. Any attacker with layer-3 network access to the IDU can impersonate the Touch Panel Unit (TPU) within the IDU by sending crafted TCP requests to the IDU.Enginsight
| Vendor | Product | Version |
|---|---|---|
| kratosdefense | ngc_indoor_unit_firmware | 𝑥 < 11.4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration