CVE-2018-8864

LowCVSS 3.1/10Last modified Jun 17, 2026

Description

In ATI Systems Emergency Mass Notification Systems (HPSS16, HPSS32, MHPSS, and ALERT4000) devices, a missing encryption of sensitive data vulnerability caused by specially crafted malicious radio transmissions may allow an attacker to remotely trigger false alarms.

Metrics

CVSS 3.0 3.1/10CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-311

Affected software

Vendor	Product	Versions
Acoustic Technology, Inc. (ATI Systems)	ATI Emergency Mass Notification Systems	The following ATI's Emergency Mass Notification Systems devices are affected: HPSS16, HPSS32, MHPSS, and ALERT4000.

References

http://www.securityfocus.com/bid/103721Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-100-01Mitigation, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/103721Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-100-01Mitigation, Third Party Advisory, US Government Resource

Timeline

Published: May 25, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-88659.8In Lantech IDS 2102 2.0 and prior, a stack-based buffer overflow vulnerability has been identified which may allow remote code execution. A CVE-2018-88668.8In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could perform command injection.CVE-2018-88677.5In GE PACSystems RX3i CPE305/310 version 9.20 and prior, RX3i CPE330 version 9.21 and prior, RX3i CPE 400 version 9.30 and prior, PACSystems CVE-2018-88686.2Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains debug code meant to test the functionality of the monitor's communi CVE-2018-88699.8In Lantech IDS 2102 2.0 and prior, nearly all input fields allow for arbitrary input on the device. A CVSS v3 base score of 9.8 has been cal CVE-2018-88706.4Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains a hard-coded operating system password. An attacker with physical a CVE-2018-88719.8In Delta Electronics Automation TPEditor version 1.89 or prior, parsing a malformed program file may cause heap-based buffer overflow vulner CVE-2018-88728.1In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, system calls read directly from memory addresses within the CVE-2018-88737.8In 2345 Security Guard 3.6, the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD) or possibly have un CVE-2018-88747.8In 2345 Security Guard 3.6, the driver file (2345Wrath.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecif CVE-2018-88757.8In 2345 Security Guard 3.6, the driver file (2345Wrath.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecif CVE-2018-88767.8In 2345 Security Guard 3.6, the driver file (2345Wrath.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecif