About Us - Hero image

Vulnerability Advisories

← Back to Vulnerability Advisories
CVE-2023-36669 High

CVE-2023-36669: Kratos NGC Indoor Unit (IDU) update for missing authentication

Advisory ID CVE-2023-36669
Severity High
Publish Date June 27, 2023
Affected Products Kratos NGC Indoor Unit (IDU) with firmware version 11.3 and below.
Credit / Discoverer

Paul Noalhyt, Red Balloon Security

Synopsis

Kratos NGC Indoor Unit (IDU) update for missing authentication

Overview & Description

Missing Authentication for Critical Function within the Kratos NGC Indoor Unit (IDU) allows remote attackers to obtain arbitrary control of the IDU/ODU system.

Solution & Remediation

Solution

The issue is fixed in Version: 11.4.0.0 and newer releases.

Fix & Mitigate

Upgrade to NGC Indoor Unit (IDU) version 11.4.0.0 or newer release.

Ready to Get Started?

A family of solutions that enable the digital transformation of ground systems.

Contact Us