Kratosdefense vulnerabilities
We track 3 vulnerabilities in Kratosdefense products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 18, 2023.
Latest Kratosdefense vulnerabilities
- 9.8 Critical severity
ngc_indoor_unit: Improper Neutralization of Special Elements used in an OS Command
A remotely exploitable command injection vulnerability was found on the Kratos NGC-IDU 9.1.0.4. An attacker can execute arbitrary Linux commands as root by sending crafted TCP requests to the device.
- 9.8 Critical severity
ngc_indoor_unit: Missing Authentication for Critical Functionality
Missing Authentication for a Critical Function within the Kratos NGC Indoor Unit (IDU) before 11.4 allows remote attackers to obtain arbitrary control of the IDU/ODU system. Any attacker with layer-3 network access to the IDU can impersonate the Touch Panel Un
- 7.2 High severity
Spectralnet Narrowband Firmware: Improper Neutralization of Special Elements used in a Command
A remote command injection issues exists in the web server of the Kratos SpectralNet device with SpectralNet Narrowband (NB) before 1.7.5. As an admin user, an attacker can send a crafted password in order to execute Linux commands as the root user.