PT-2017-13256 · Philips · Philips Xcelera+1

Publicado 2017-11-17 · Atualizado 2019-10-03 · CVE-2017-14111

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Philips IntelliSpace Cardiovascular versions 2.3.0 and earlier Philips Xcelera versions R4.1L1 and earlier

Description The workstation logging function in the affected software records domain authentication credentials. If an attacker accesses these credentials, they can use them to access the application or other user entitlements.

Recommendations For Philips IntelliSpace Cardiovascular versions 2.3.0 and earlier, update to a version later than 2.3.0 to resolve the issue. For Philips Xcelera versions R4.1L1 and earlier, update to a version later than R4.1L1 to resolve the issue.

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2017-14111

Produtos afetados

Philips Intellispace Cardiovascular

Philips Xcelera

Referências · 5

• https://ics-cert.us-cert.gov/advisories/ICSMA-17-318-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-14111 · Nota de Segurança
• http://securityfocus.com/bid/101850 · Nota
• https://usa.philips.com/healthcare/about/customer-support/product-security · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-14111 · Aviso do Fabricante