PT-2018-18863 · Systematic · Systematic Sitaware

2U53 · Publicado 2018-04-04 · Atualizado 2018-05-22 · CVE-2018-9115

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Systematic SitaWare version 6.4 SP2

Description The issue arises from insufficient input validation from other sources, such as information utilizing the NVG interface. This can allow an attacker to freeze the Situational Layer, preventing updates to the Situational Picture. The user may not notice this issue until attempting to work with the affected layer.

Recommendations For Systematic SitaWare version 6.4 SP2, consider restricting access to the NVG interface as a temporary mitigation measure until a patch is available. Additionally, monitor the Situational Layer for any signs of freezing to minimize the impact of potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-9115

Produtos afetados

Systematic Sitaware

Referências · 5

• 🔥 https://exploit-db.com/exploits/44375 · Exploit
• 🔥 https://packetstormsecurity.com/files/146982 · Exploit
• https://osv.dev/vulnerability/CVE-2018-9115 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-9115 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/141099 · Nota