PT-2018-18863 · Systematic · Systematic Sitaware

2U53 · Published 2018-04-04 · Updated 2018-05-22 · CVE-2018-9115

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Systematic SitaWare version 6.4 SP2

Description The issue arises from insufficient input validation from other sources, such as information utilizing the NVG interface. This can allow an attacker to freeze the Situational Layer, preventing updates to the Situational Picture. The user may not notice this issue until attempting to work with the affected layer.

Recommendations For Systematic SitaWare version 6.4 SP2, consider restricting access to the NVG interface as a temporary mitigation measure until a patch is available. Additionally, monitor the Situational Layer for any signs of freezing to minimize the impact of potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-9115

Affected Products

Systematic Sitaware

References · 5

• 🔥 https://exploit-db.com/exploits/44375 · Exploit
• 🔥 https://packetstormsecurity.com/files/146982 · Exploit
• https://osv.dev/vulnerability/CVE-2018-9115 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-9115 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/141099 · Note