VULNERABILITY INTELLIGENCE

CVE-2023-36669

CVSS score9.8 CRITICAL

EPSS probability0.87%

CISA KEVNot currently listed

Published2023-07-18

Last modified2026-06-17

Description

Missing Authentication for a Critical Function within the Kratos NGC Indoor Unit (IDU) before 11.4 allows remote attackers to obtain arbitrary control of the IDU/ODU system. Any attacker with layer-3 network access to the IDU can impersonate the Touch Panel Unit (TPU) within the IDU by sending crafted TCP requests to the IDU.