critical9.8
CVE-2023-36670
A remotely exploitable command injection vulnerability was found on the Kratos NGC-IDU 9.1.0.4.
Impact
A remotely exploitable command injection vulnerability was found on the Kratos NGC-IDU 9.1.0.4. An attacker can execute arbitrary Linux commands as root by sending crafted TCP requests to the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kratosdefense | Ngc Indoor Unit Firmware | Version 9.1.0.4 |