CVE-2018-18878

Published: Jun 18, 2019Modified: Nov 21, 2024

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In firmware version MS_2.6.9900 of Columbia Weather MicroServer, the BACnet daemon does not properly validate input, which could allow a remote attacker to send specially crafted packets causing the device to become unavailable.

Affected (1)

Products: Columbiaweather: Weather Microserver Firmware

Columbiaweather

1 product

Weather Microserver Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Columbiaweather Weather Microserver Firmware	Version ms_2.6.9900

Running on/with	Platform Versions
Columbiaweather Weather Microserver	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

https://applied-risk.com/labs/advisories

Source: cve@mitre.org

Third Party Advisory

https://ics-cert.us-cert.gov/advisories/ICSA-19-078-02

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

https://applied-risk.com/labs/advisories

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://ics-cert.us-cert.gov/advisories/ICSA-19-078-02

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.