PT-2019-8755 · Epic Games+1 · Unreal Engine+1

Mauricio Corrêa · Published 2019-07-10 · Updated 2021-05-10 · CVE-2018-10531

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions America's Army Proving Grounds (affected versions not specified)

Description An issue was discovered in the America's Army Proving Grounds platform for the Unreal Engine, where sending a false packet via UDP can cause the application server to respond with several bytes. This gives the possibility of DoS amplification and can even be used in DDoS attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-10531

Affected Products

America'S Army Proving Grounds

Unreal Engine

References · 4

• 🔥 https://xlabs.com.br/blog/cve-2018-10531-americas-army-proving-grounds-ddos-amplification · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-10531 · Security Note
• https://xlabs.com.br/blog/author/mauricio-correa · Note
• https://t.me/cibsecurity/5458 · Telegram Post