PT-2018-18674 · Ati Systems · Ati Systems Emergency Mass Notification Systems

Balint Seeber · Published 2018-05-25 · Updated 2019-10-09 · CVE-2018-8864

Positive Technologies (AI Summary)

CVSS v2.0

2.9

Low

Base vector

AV:A/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ATI Systems Emergency Mass Notification Systems devices (affected versions not specified)

Description A missing encryption of sensitive data issue in the devices may allow an attacker to remotely trigger false alarms by sending specially crafted malicious radio transmissions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-311

Related Identifiers

CVE-2018-8864

Affected Products

Ati Systems Emergency Mass Notification Systems

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-8864 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-18-100-01 · Note
• http://securityfocus.com/bid/103721 · Note