Lucene search

MitreCVE-2018-14062

HistoryAug 15, 2019 - 9:15 p.m.

CVE-2018-14062

2019-08-1521:15:10

CWE-310

mitre

web.nvd.nist.gov

101

cve-2018-14062

cospas-sarsat

remote attackers

message forgery

denial of service

encrypted messages

CVSS2

9.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:C/A:C

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.002

Percentile

64.5%

JSON

The COSPAS-SARSAT protocol allows remote attackers to forge messages, replay encrypted messages, conduct denial of service attacks, and send private messages (unrelated to distress alerts) via a crafted 406 MHz digital signal.

Affected configurations

Nvd

Node

cospas-sarsatcospas-sarsat_systemMatch-

VendorProductVersionCPE
cospas-sarsatcospas-sarsat_system-cpe:2.3:a:cospas-sarsat:cospas-sarsat_system:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cospas-sarsat	cospas-sarsat_system	-	cpe:2.3:a:cospas-sarsat:cospas-sarsat_system:-:::::::*

References

conference.hitb.org/hitbsecconf2019ams/materials/D1T1%20-%20The%20Birdman%20and%20Cospas-Sarsat%20Satellites%20-%20Hao%20Jingli.pdf

conference.hitb.org/hitbsecconf2019ams/sessions/the-birdman-hacking-cospas-sarsat-satellites/

CVSS2

9.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:C/A:C

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.002

Percentile

64.5%

JSON

Related for CVE-2018-14062