CVE-2018-8867

🗓️ 18 May 2018 20:00:00Reported by icscertType

GE PACSystems RX3i CPE305/310, RX3i CPE330, RX3i CPE 400 and PACSystems RSTi-EP CPE 100 devices prior to 9.x allow remote unavailability

Reporter	Title	Published	Views	Family All 11
Tenable Nessus	GE PACSystems Multiple Devices Denial of Service	8 May 201900:00	–	nessus
Tenable Nessus	Ge Pacsystems Improper Input Validation	8 Nov 201900:00	–	nessus
Tenable Nessus	GE PACSystems CPE305/310, CPE330, CPE400, RSTi-EP CPE 100, CPU320/CRU320, RXi Improper Input Validation (CVE-2018-8867)	7 Feb 202200:00	–	nessus
ATTACKERKB	CVE-2018-8867	18 May 201820:29	–	attackerkb
CNVD	Input Validation Error Vulnerability in Various GE PACSystems Products	21 May 201800:00	–	cnvd
Cvelist	CVE-2018-8867	18 May 201820:00	–	cvelist
EUVD	EUVD-2018-20475	7 Oct 202500:30	–	euvd
ICS	GE PACSystems CPE305/310, CPE330, CPE400, RSTi-EP CPE 100, CPU320/CRU320, RXi	17 May 201800:00	–	ics
NVD	CVE-2018-8867	18 May 201820:29	–	nvd
OSV	CVE-2018-8867	18 May 201820:29	–	osv

NVD

Vulners

Node

ge pacsystems_rx3i_cpe305_firmwareRange≤9.20

AND

ge pacsystems_rx3i_cpe305Match-

Node

ge pacsystems_rx3i_cpe310_firmwareRange≤9.20

AND

ge pacsystems_rx3i_cpe310Match-

Node

ge rx3i_cpe330_firmwareRange≤9.21

AND

ge rx3i_cpe330Match-

Node

ge rx3i_cpe_400_firmwareRange≤9.30

AND

ge rx3i_cpe_400Match-

Node

ge pacsystems_rsti-ep_cpe_100_firmwareMatch-

AND

ge pacsystems_rsti-ep_cpe_100Match-

Node

ge pacsystems_cpu320_firmwareMatch-

AND

ge pacsystems_cpu320Match-

Node

ge pacsystems_cru320_firmwareMatch-

AND

ge pacsystems_cru320Match-

Node

ge pacsystems_rxi_firmwareMatch-

AND

ge pacsystems_rxiMatch-

[
  {
    "product": "GE PACSystems RX3i CPE305/310 version 9.20 and prior RX3i CPE330 version 9.21 and prior RX3i CPE 400 version 9.30 and prior PACSystems RSTi-EP CPE 100 all versionsPACSystems CPU320/CRU320 RXi all versions",
    "vendor": "ICS-CERT",
    "versions": [
      {
        "status": "affected",
        "version": "GE PACSystems RX3i CPE305/310 version 9.20 and prior RX3i CPE330 version 9.21 and prior RX3i CPE 400 version 9.30 and prior PACSystems RSTi-EP CPE 100 all versionsPACSystems CPU320/CRU320 RXi all versions"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/104241
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-137-01

21 Nov 2024 04:14Current

7.4High risk

Vulners AI Score7.4

CVSS 37.5

CVSS 27.8

EPSS0.02786

CWE-20

cve-2018-8867 ge pacsystems rx3i cpe305 cpe310 cpe330 cpe400 rsti-ep nvd vulnerability remote attack validation input security