CVE-2023-3206 - Chengdu VEC40G denial of service

Back Back to CVE browser

HIGH

Chengdu VEC40G denial of service

Published Jun 12, 2023

7.5

HIGH

CVSS 3.1

EPSS 18.71%

Description

A vulnerability classified as problematic was found in Chengdu VEC40G 3.0. Affected by this vulnerability is an unknown functionality of the file /send_order.cgi?parameter=restart. The manipulation of the argument restart with the input reboot leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231229 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor Chengdu Product VEC40G Default
n/a
- Version
  3.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Chengdu

VEC40G

n/a

Version	Status	Constraints
3.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-404

Improper Resource Shutdown or Release

CWE-77

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-43884
Advisory
https://github.com/shulao2020/cve/blob/main/Flying%20Fish.md
exploitThird Party Advisory
https://vuldb.com/?ctiid.231229
signaturepermissions-requiredThird Party Advisory
https://vuldb.com/?id.231229
vdb-entrytechnical-descriptionThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-43884		Advisory
https://github.com/shulao2020/cve/blob/main/Flying%20Fish.md		exploitThird Party Advisory
https://vuldb.com/?ctiid.231229		signaturepermissions-requiredThird Party Advisory
https://vuldb.com/?id.231229		vdb-entrytechnical-descriptionThird Party Advisory