high7.5
CVE-2018-8867
In GE PACSystems RX3i CPE305/310 version 9.20 and prior, RX3i CPE330 version 9.21 and prior, RX3i CPE 400 version 9.30 and prior, PACSystems RSTi-EP CPE 100 al…
Impact
In GE PACSystems RX3i CPE305/310 version 9.20 and prior, RX3i CPE330 version 9.21 and prior, RX3i CPE 400 version 9.30 and prior, PACSystems RSTi-EP CPE 100 all versions, and PACSystems CPU320/CRU320 RXi all versions, the device does not properly validate input, which could allow a remote attacker to send specially crafted packets causing the device to become unavailable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ge | Pacsystems Rx3i Cpe305 Firmware | through 9.20 |
| Ge | Pacsystems Rx3i Cpe310 Firmware | through 9.20 |
| Ge | Rx3i Cpe330 Firmware | through 9.21 |
| Ge | Rx3i Cpe 400 Firmware | through 9.30 |
| Ge | Pacsystems Rsti-Ep Cpe 100 Firmware | All versions |
| Ge | Pacsystems Cpu320 Firmware | All versions |
| Ge | Pacsystems Cru320 Firmware | All versions |
| Ge | Pacsystems Rxi Firmware | All versions |