title: Vulnerability in Ingeteam's INGEPAC EF
description: Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuzzing techniques that would allow him to gain knowledge about specially crafted packets that would create a DoS condition through the MMS protocol when initiating communication, achieving a complete system reboot of the device and its services.
problem types: CWE-20: Improper Input Validation
affected:
{
defaultStatus: unaffected
product: INGEPAC FC5066
vendor: Ingeteam
versions:
status: affected, version: 9.0.22.6+6.1.1.22+5.3.1.1
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.6
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: 9.8.30.0 version and later.