CVE-2018-8864 In ATI Systems Emergency Mass Notification Systems (HPSS16, HPSS32, MHPSS, and ALERT4000) devices, a missing encryption of sensitive data vulnerability caused by specially crafted malicious radio tran...
LowCVSS 3.1
EPSS 0.17%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In ATI Systems Emergency Mass Notification Systems (HPSS16, HPSS32, MHPSS, and ALERT4000) devices, a missing encryption of sensitive data vulnerability caused by specially crafted malicious radio transmissions may allow an attacker to remotely trigger false alarms.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| atisystem hpss16 firmware | All versions | No fix listed |
| atisystem hpss32 firmware | All versions | No fix listed |
| atisystem mhpss firmware | All versions | No fix listed |
| atisystem alert4000 firmware | All versions | No fix listed |
| Acoustic Technology, Inc. (ATI Systems) ATI Emergency Mass Notification Systems | = The following ATI's Emergency Mass Notification Systems devices are affected: HPSS16, HPSS32, MHPSS, and ALERT4000. | No fix listed |
References
- 103721 third-party-advisory vdb-entry
- ics-cert.us-cert.gov mitigation third-party-advisory us-government-resource