CVE-2023-36669
18.07.2023, 18:15
Missing Authentication for a Critical Function within the Kratos NGC Indoor Unit (IDU) before 11.4 allows remote attackers to obtain arbitrary control of the IDU/ODU system. Any attacker with layer-3 network access to the IDU can impersonate the Touch Panel Unit (TPU) within the IDU by sending crafted TCP requests to the IDU.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| kratosdefense | ngc_indoor_unit_firmware | 𝑥 < 11.4 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| kratosdefense | ngc_indoor_unit | 𝑥 < 11.4 | ADP |
Common Weakness Enumeration