CVE-2018-8862

Опубликовано: 25 мая 2018

Источник: nvd

CVSS3: 3.1

CVSS2: 2.9

EPSS Низкий

Описание

In ATI Systems Emergency Mass Notification Systems (HPSS16, HPSS32, MHPSS, and ALERT4000) devices, an improper authentication vulnerability caused by specially crafted malicious radio transmissions may allow an attacker to remotely trigger false alarms.

Ссылки

http://www.securityfocus.com/bid/103721
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-100-01
Mitigation
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/103721
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-100-01
Mitigation
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:atisystem:hpss16_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:atisystem:hpss16:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:atisystem:hpss32_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:atisystem:hpss32:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:atisystem:mhpss_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:atisystem:mhpss:-:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

cpe:2.3:o:atisystem:alert4000_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:atisystem:alert4000:-:*:*:*:*:*:*:*

EPSS

Процентиль: 42%

0.00198

Низкий

3.1 Low

CVSS3

2.9 Low

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-fpp6-xw3r-cjjx

CVSS3: 3.1

github

больше 3 лет назад

EPSS

Процентиль: 42%

0.00198

Низкий

3.1 Low

CVSS3

2.9 Low

CVSS2

Дефекты

CWE-287