VULNERABILITY INTELLIGENCE

CVE-2023-36670

CVSS score9.8 CRITICAL
EPSS probability1.49%
CISA KEVNot currently listed
Published2023-07-18
Last modified2026-06-17

Description

A remotely exploitable command injection vulnerability was found on the Kratos NGC-IDU 9.1.0.4. An attacker can execute arbitrary Linux commands as root by sending crafted TCP requests to the device.

Primary references