CVEvulnerability

CVE-2018-8862

3.1 LOW Published 2018-05-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-05-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
3.1 LOW — CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 2.0 ([email protected])
2.9 LOW — AV:A/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-287

Description

In ATI Systems Emergency Mass Notification Systems (HPSS16, HPSS32, MHPSS, and ALERT4000) devices, an improper authentication vulnerability caused by specially crafted malicious radio transmissions may allow an attacker to remotely trigger false alarms.

Affected configurations

• atisystem hpss16 firmware • atisystem hpss32 firmware • atisystem mhpss firmware • atisystem alert4000 firmware

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References