← Back

CVE-2023-38405

nvd nist
Published: Jul 17, 2023Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

On Crestron 3-Series Control Systems before 1.8001.0187, crafting and sending a specific BACnet packet can cause a crash.

Affected (3)

Crestron
3 products
Cp3n 6505417 Firmware
Cp3 6504877 Firmware
Cp3 Gv 6506034 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cp3n 6505417 Firmware
Before 1.8001.0187
Running on/withPlatform Versions
Crestron
Cp3n 6505417
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cp3 6504877 Firmware
Before 1.8001.0187
Running on/withPlatform Versions
Crestron
Cp3 6504877
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cp3 Gv 6506034 Firmware
Before 1.8001.0187
Running on/withPlatform Versions
Crestron
Cp3 Gv 6506034
All versions

Related CWEs

CWE-770
Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (2)

Source: cve@mitre.org
Release Notes
Source: af854a3a-2127-422b-91ae-364da2661108
Release Notes

Timeline

No history available yet.