CVE-2018-9115
UnknownEPSS 6.02%
Last modified
CVE-2018-9115 is a vulnerability of currently unknown severity. Systematic SitaWare 6.4 SP2 does not validate input from other sources sufficiently. e.g., information utilizing the NVG interface. EPSS estimates a 6.02% chance of exploitation in the next 30 days.
Description
Systematic SitaWare 6.4 SP2 does not validate input from other sources sufficiently. e.g., information utilizing the NVG interface. An attacker can freeze the Situational Layer, which means that the Situational Picture is no longer updated. Unfortunately, the user cannot notice until he tries to work with that layer.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Systematicinc | Sitaware | 6.4 | Sp2 |
References
- https://packetstormsecurity.com/files/146982Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/44375/Exploit, Third Party Advisory, VDB Entry
- https://packetstormsecurity.com/files/146982Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/44375/Exploit, Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-9115?
Systematic SitaWare 6.4 SP2 does not validate input from other sources sufficiently. e.g., information utilizing the NVG interface. An attacker can freeze the Situational Layer, which means that the Situational Picture is no longer updated. Unfortunately, the user cannot notice until he tries to work with that layer.
How severe is CVE-2018-9115?
Severity scoring for CVE-2018-9115 is pending analysis. The EPSS model estimates a 6.02% probability of exploitation in the next 30 days.
How do I fix CVE-2018-9115?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
Are you affected by CVE-2018-9115?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST