CVE-2018-8838

Name of the Vulnerable Software and Affected Versions CENTUM CS 1000 all versions CENTUM CS 3000 versions R3.09.50 and earlier CENTUM CS 3000 Small versions R3.09.50 and earlier CENTUM VP versions R6.03.10 and earlier CENTUM VP Small versions R6.03.10 and earlier CENTUM VP Basic versions R6.03.10 and earlier Exaopc versions R3.75.00 and earlier B/M9000 CS all versions B/M9000 VP versions R8.01.01 and earlier

Description A weakness in access controls may allow a local attacker to exploit the message management function of the system. This could potentially enable an attacker to generate false system or technological alarm signals or block alarm signals.

Recommendations For CENTUM CS 1000, consider restricting access to the message management function until a patch is available. For CENTUM CS 3000 versions R3.09.50 and earlier, update to a version later than R3.09.50. For CENTUM CS 3000 Small versions R3.09.50 and earlier, update to a version later than R3.09.50. For CENTUM VP versions R6.03.10 and earlier, update to a version later than R6.03.10. For CENTUM VP Small versions R6.03.10 and earlier, update to a version later than R6.03.10. For CENTUM VP Basic versions R6.03.10 and earlier, update to a version later than R6.03.10. For Exaopc versions R3.75.00 and earlier, update to a version later than R3.75.00. For B/M9000 CS, restrict access to the system until a patch is available. For B/M9000 VP versions R8.01.01 and earlier, update to a version later than R8.01.01.