CVE-2018-8864

In ATI Systems Emergency Mass Notification Systems (HPSS16, HPSS32, MHPSS, and ALERT4000) devices, a missing encryption of sensitive data vulnerability caused by specially crafted malicious radio transmissions may allow an attacker to remotely trigger false alarms.

Score

CVSS 3.0 3.1 Low

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-05-25

Last modified

2024-09-16

Weaknesses

CWE-311

Affected products

• Ati Emergency Mass Notification Systems (Acoustic Technology Inc. Ati Systems)
• Alert4000 Firmware (Atisystem)
• Hpss16 Firmware (Atisystem)
• Hpss32 Firmware (Atisystem)
• Mhpss Firmware (Atisystem)

References

• http://www.securityfocus.com/bid/103721
• https://ics-cert.us-cert.gov/advisories/ICSA-18-100-01