CVE-2023-3206

A vulnerability classified as problematic was found in Chengdu VEC40G 3.0. Affected by this vulnerability is an unknown functionality of the file /send_order.cgi?parameter=restart. The manipulation of the argument restart with the input reboot leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231229 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-404
• CWE-77

• https://github.com/shulao2020/cve/blob/main/Flying%20Fish.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.231229Third Party Advisory
• https://vuldb.com/?id.231229Third Party Advisory
• https://github.com/shulao2020/cve/blob/main/Flying%20Fish.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.231229Third Party Advisory
• https://vuldb.com/?id.231229Third Party Advisory

Published

Jun 12, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-32054Volume Shadow Copy Elevation of Privilege Vulnerability7.3
• CVE-2023-32055Active Template Library Elevation of Privilege Vulnerability6.7
• CVE-2023-32056Windows Server Update Service (WSUS) Elevation of Privilege …9.8
• CVE-2023-32057Microsoft Message Queuing (MSMQ) Remote Code Execution Vulne…9.8
• CVE-2023-32058Vyper is a Pythonic smart contract language for the Ethereum…7.5
• CVE-2023-32059Vyper is a Pythonic smart contract language for the Ethereum…7.5
• CVE-2023-32060DHIS2 Core contains the service layer and Web API for DHIS2,…6.5
• CVE-2023-32061Discourse is an open source discussion platform. Prior to ve…5.3
• CVE-2023-32062OroPlatform is a package that assists system and user calend…4.3
• CVE-2023-32063OroCalendarBundle enables a Calendar feature and related fun…5
• CVE-2023-32064OroCommerce package with customer portal and non authenticat…4.3
• CVE-2023-32065OroCommerce is an open-source Business to Business Commerce …5.8