CVE-2018-8867CWE-20

CVE-2018-8867

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 3.4%

probabilidad de explotación

3.4%top 12% de las CVE

explotación observada

noninguna fuente lo reporta

In GE PACSystems RX3i CPE305/310 version 9.20 and prior, RX3i CPE330 version 9.21 and prior, RX3i CPE 400 version 9.30 and prior, PACSystems RSTi-EP CPE 100 all versions, and PACSystems CPU320/CRU320 RXi all versions, the device does not properly validate input, which could allow a remote attacker to send specially crafted packets causing the device to become unavailable.

Productos afectados

ICS-CERT · GE PACSystems RX3i CPE305/310 version 9.20 and prior RX3i CPE330 version 9.21 and prior RX3i CPE 400 version 9.30 and prior PACSystems RSTi-EP CPE 100 all versionsPACSystems CPU320/CRU320 RXi all versions

Referencias

https://ics-cert.us-cert.gov/advisories/ICSA-18-137-01 http://www.securityfocus.com/bid/104241