CVE Vulnerability

CVE-2018-9115

Systematic SitaWare 6.4 SP2 does not validate input from other sources sufficiently. e.g., information utilizing the NVG interface. An attacker can freeze the Situational Layer, which means that the Situational Picture is no longer updated. Unfortunately, the user cannot notice until he tries to work with that layer.

5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

Scope

5.3 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://www.exploit-db.com/exploits/44375/ Exploit Third Party Advisory
https://packetstormsecurity.com/files/146982 Exploit Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/141099 VDB Entry
Configurations

Configuration 1

cpe:2.3:a:systematicinc:sitaware:6.4:sp2:*:*:*:*:*:*
Information

Published : 2018-04-04 07:29

Updated : 2018-05-22 01:10

NVD link : CVE-2018-9115

Mitre link : CVE-2018-9115

Products Affected
No products.
CWE
CWE-20