CVE-2023-3770

4.3 mediumEPSS 0.4%

Medium (4.3) in ingeteam ingepac da3451 firmware. EPSS 0.4% chance of exploitation in the next 30 days.

Incorrect validation vulnerability of the data entered, allowing an attacker with access to the network on which the affected device is located to use the discovery port protocol (1925/UDP) to obtain device-specific information without the need for authentication.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWEs: CWE-862, CWE-20
Published: 2023-10-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ingeteam:ingepac_da3451_firmware

References

https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ingeteam-products
https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ingeteam-products

Check your stack JSON