Approved changes feed: RSS · Atom

cpe:2.3:h:kratosdefense:ngc_indoor_unit:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorKratosdefense (7533a830-e066-52f5-ae5e-9d1c49490cd0)
ProductNgc Indoor Unit (376b277e-518c-5e57-9346-ce347b4e1e2a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-36670 not_vulnerable 2026-06-08 06:08:12.847894 Details available
A remotely exploitable command injection vulnerability was found on the Kratos NGC-IDU 9.1.0.4. An attacker can execute arbitrary Linux commands as root by sending crafted TCP requests to the device.
Published: 2023-07-18T00:00:00.000Z
Updated: 2024-10-28T16:48:47.521Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36670 vulnerable 2026-06-08 06:08:12.846663 Details available
A remotely exploitable command injection vulnerability was found on the Kratos NGC-IDU 9.1.0.4. An attacker can execute arbitrary Linux commands as root by sending crafted TCP requests to the device.
Published: 2023-07-18T00:00:00.000Z
Updated: 2024-10-28T16:48:47.521Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36669 not_vulnerable 2026-06-08 06:08:12.846311 Details available
Missing Authentication for a Critical Function within the Kratos NGC Indoor Unit (IDU) before 11.4 allows remote attackers to obtain arbitrary control of the IDU/ODU system. Any attacker with layer-3 network access to the IDU can impersonate the Touch Panel Unit (TPU) within the IDU by sending crafted TCP requests to the IDU.
Published: 2023-07-18T00:00:00.000Z
Updated: 2024-10-28T18:19:59.904Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36669 vulnerable 2026-06-08 06:08:12.845173 Details available
Missing Authentication for a Critical Function within the Kratos NGC Indoor Unit (IDU) before 11.4 allows remote attackers to obtain arbitrary control of the IDU/ODU system. Any attacker with layer-3 network access to the IDU can impersonate the Touch Panel Unit (TPU) within the IDU by sending crafted TCP requests to the IDU.
Published: 2023-07-18T00:00:00.000Z
Updated: 2024-10-28T18:19:59.904Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.