CVEvulnerability
CVE-2018-9115
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-04-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-20
Description
Systematic SitaWare 6.4 SP2 does not validate input from other sources sufficiently. e.g., information utilizing the NVG interface. An attacker can freeze the Situational Layer, which means that the Situational Picture is no longer updated. Unfortunately, the user cannot notice until he tries to work with that layer.
Affected configurations
• systematicinc sitaware 6.4
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/141099 VDB Entry
- https://packetstormsecurity.com/files/146982 Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/44375/ Exploit, Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/141099 VDB Entry
- https://packetstormsecurity.com/files/146982 Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/44375/ Exploit, Third Party Advisory, VDB Entry