medium5.3Public exploit code
CVE-2018-9115
Systematic SitaWare 6.4 SP2 does not validate input from other sources sufficiently.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Systematic SitAware - NVG Denial of Service2018-03-30 · dos · xml
Impact
Systematic SitaWare 6.4 SP2 does not validate input from other sources sufficiently. e.g., information utilizing the NVG interface. An attacker can freeze the Situational Layer, which means that the Situational Picture is no longer updated. Unfortunately, the user cannot notice until he tries to work with that layer.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Systematicinc | Sitaware | Version 6.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://exchange.xforce.ibmcloud.com/vulnerabilities/141099
- https://packetstormsecurity.com/files/146982
- https://www.exploit-db.com/exploits/44375/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/141099
- https://packetstormsecurity.com/files/146982
- https://www.exploit-db.com/exploits/44375/