CVE-2018-8867

In GE PACSystems RX3i CPE305/310 version 9.20 and prior, RX3i CPE330 version 9.21 and prior, RX3i CPE 400 version 9.30 and prior, PACSystems RSTi-EP CPE 100 all versions, and PACSystems CPU320/CRU320 RXi all versions, the device does not properly validate input, which could allow a remote attacker to send specially crafted packets causing the device to become unavailable.

Score

CVSS 3.0 7.5 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-05-18

Last modified

2024-09-16

Weaknesses

CWE-20

Affected products

• Pacsystems Cpu320 Firmware (Ge)
• Pacsystems Cru320 Firmware (Ge)
• Pacsystems Rsti-ep Cpe 100 Firmware (Ge)
• Pacsystems Rx3i Cpe305 Firmware (Ge)
• Pacsystems Rx3i Cpe310 Firmware (Ge)
• Pacsystems Rxi Firmware (Ge)
• Rx3i Cpe330 Firmware (Ge)
• Rx3i Cpe 400 Firmware (Ge)
• Ge Pacsystems Rx3i Cpe305310 Version 9.20 And Prior Rx3i Cpe330 Version 9.21 And Prior Rx3i Cpe 400 Version 9.30 And Prior Pacsystems Rsti-ep Cpe 100 All Versionspacsystems Cpu320cru320 Rxi All Versions (Ics-cert)

References

• http://www.securityfocus.com/bid/104241
• https://ics-cert.us-cert.gov/advisories/ICSA-18-137-01