CVE-2018-8864 Weak cryptography in ATI Emergency Mass Notification Systems
Attackers can remotely trigger false alarms in ATI emergency notification systems due to missing encryption of sensitive data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-8864?
CVE-2018-8864 is a low-severity vulnerability in Acoustic Technology, Inc. (ATI Systems) ATI Emergency Mass Notification Systems, published on 25 May 2018. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In ATI Systems Emergency Mass Notification Systems (HPSS16, HPSS32, MHPSS, and ALERT4000) devices, a missing encryption of sensitive data vulnerability caused by specially crafted malicious radio transmissions may allow an attacker to remotely trigger false alarms.
Weakness: CWE-311
Which versions are affected by CVE-2018-8864?
It affects 4 products.
Products include Atisystem Alert4000 Firmware, Atisystem Hpss16 Firmware, Atisystem Hpss32 Firmware, Atisystem Mhpss Firmware.
How do I fix CVE-2018-8864?
No fix has been published for CVE-2018-8864 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-8864 being exploited?
There is no known exploitation of CVE-2018-8864 in the wild and no public exploit code.
Other vulnerabilities in Acoustic Technology, Inc. (ATI Systems) ATI Emergency Mass Notification Systems
Sources
Also known as GHSA-67jv-mp69-jmfg.