CVE-2018-8862

LowCVSS 3.1/10Last modified Jun 17, 2026

Description

In ATI Systems Emergency Mass Notification Systems (HPSS16, HPSS32, MHPSS, and ALERT4000) devices, an improper authentication vulnerability caused by specially crafted malicious radio transmissions may allow an attacker to remotely trigger false alarms.

Metrics

CVSS 3.0 3.1/10CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
Acoustic Technology, Inc. (ATI Systems)	Emergency Mass Notification Systems	The following ATI's Emergency Mass Notification Systems devices are affected: HPSS16, HPSS32, MHPSS, and ALERT4000.

References

http://www.securityfocus.com/bid/103721Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-100-01Mitigation, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/103721Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-100-01Mitigation, Third Party Advisory, US Government Resource

Timeline

Published: May 25, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-88637.5The HTTP header in Philips EncoreAnywhere contains data an attacker may be able to use to gain sensitive information.CVE-2018-88643.1In ATI Systems Emergency Mass Notification Systems (HPSS16, HPSS32, MHPSS, and ALERT4000) devices, a missing encryption of sensitive data vu CVE-2018-88659.8In Lantech IDS 2102 2.0 and prior, a stack-based buffer overflow vulnerability has been identified which may allow remote code execution. A CVE-2018-88668.8In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could perform command injection.CVE-2018-88677.5In GE PACSystems RX3i CPE305/310 version 9.20 and prior, RX3i CPE330 version 9.21 and prior, RX3i CPE 400 version 9.30 and prior, PACSystems CVE-2018-88686.2Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains debug code meant to test the functionality of the monitor's communi CVE-2018-88699.8In Lantech IDS 2102 2.0 and prior, nearly all input fields allow for arbitrary input on the device. A CVSS v3 base score of 9.8 has been cal CVE-2018-88706.4Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains a hard-coded operating system password. An attacker with physical a CVE-2018-88719.8In Delta Electronics Automation TPEditor version 1.89 or prior, parsing a malformed program file may cause heap-based buffer overflow vulner CVE-2018-88728.1In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, system calls read directly from memory addresses within the CVE-2018-88737.8In 2345 Security Guard 3.6, the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD) or possibly have un CVE-2018-88747.8In 2345 Security Guard 3.6, the driver file (2345Wrath.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecif