← Back

CVE-2018-8862

nvd nist
Published: May 25, 2018Modified: Jun 17, 2026

JSON object

Loading...
3.1
Vector
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Exploitability: 1.6 / Impact: 1.4
Source: NVD

Description

In ATI Systems Emergency Mass Notification Systems (HPSS16, HPSS32, MHPSS, and ALERT4000) devices, an improper authentication vulnerability caused by specially crafted malicious radio transmissions may allow an attacker to remotely trigger false alarms.

Affected (4)

Atisystem
4 products
Hpss16 Firmware
Hpss32 Firmware
Mhpss Firmware
Alert4000 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Hpss16 Firmware
All versions
Running on/withPlatform Versions
Atisystem
Hpss16
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Hpss32 Firmware
All versions
Running on/withPlatform Versions
Atisystem
Hpss32
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mhpss Firmware
All versions
Running on/withPlatform Versions
Atisystem
Mhpss
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Alert4000 Firmware
All versions
Running on/withPlatform Versions
Atisystem
Alert4000
All versions

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (4)

Source: ics-cert@hq.dhs.gov
Third Party AdvisoryVDB Entry
Source: ics-cert@hq.dhs.gov
MitigationThird Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationThird Party AdvisoryUS Government Resource

Timeline

No history available yet.