ngc_indoor_unit vulnerabilities

2 known vulnerabilities in ngc_indoor_unit from Kratosdefense. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  ngc_indoor_unit: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-36670Jul 18, 2023KratosdefenseEPSS 1.49%

  A remotely exploitable command injection vulnerability was found on the Kratos NGC-IDU 9.1.0.4. An attacker can execute arbitrary Linux commands as root by sending crafted TCP requests to the device.

• 9.8 Critical severity

  ngc_indoor_unit: Missing Authentication for Critical Functionality

  CVE-2023-36669Jul 18, 2023Kratosdefense

  Missing Authentication for a Critical Function within the Kratos NGC Indoor Unit (IDU) before 11.4 allows remote attackers to obtain arbitrary control of the IDU/ODU system. Any attacker with layer-3 network access to the IDU can impersonate the Touch Panel Un