CVE Vulnerabilities

CVE-2018-8862

Improper Authentication

Published: May 25, 2018 | Modified: Oct 09, 2019
CVSS 3.x
3.1
LOW
Source:
NVD
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 2.x
2.9 LOW
AV:A/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

In ATI Systems Emergency Mass Notification Systems (HPSS16, HPSS32, MHPSS, and ALERT4000) devices, an improper authentication vulnerability caused by specially crafted malicious radio transmissions may allow an attacker to remotely trigger false alarms.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Hpss16_firmware Atisystem - (including) - (including)

Potential Mitigations

References