Improper authentication in Acoustic Technology products - CVE-2018-8862
Published: April 11, 2018
Vulnerability identifier: #VU11769
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2018-8862
CWE-ID: CWE-287
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vendor: Acoustic Technology
Affected software:
ALERT4000
MHPSS
HPSS32
HPSS16
ALERT4000
MHPSS
HPSS32
HPSS16
Detailed vulnerability description
The vulnerability allows an adjacent attacker to bypass security restrictions on the target system.
The weakness exists due to improper authentication. An adjacent attacker can submit specially crafted malicious radio transmissions, bypass authentication and trigger false alarms.
The weakness exists due to improper authentication. An adjacent attacker can submit specially crafted malicious radio transmissions, bypass authentication and trigger false alarms.
How to mitigate CVE-2018-8862
Install update from vendor's website.