PT-2018-12723 · Philips · Intellispace Cardiovascular+1

Publicado 2018-08-22 · Atualizado 2022-04-22 · CVE-2018-14789

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IntelliSpace Cardiovascular versions 3.1 and earlier Xcelera versions 4.1 and earlier

Description An unquoted search path or element issue has been identified, which may allow an attacker to execute arbitrary code and escalate their level of privileges.

Recommendations For IntelliSpace Cardiovascular versions 3.1 and earlier, update to a version later than 3.1 to resolve the issue. For Xcelera versions 4.1 and earlier, update to a version later than 4.1 to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable components until a patch is available.

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2018-14789

Produtos afetados

Intellispace Cardiovascular

Xcelera

Referências · 5

• https://t.me/cvenotify/26527 · Publicação no Telegram
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-226-01 · Nota
• https://osv.dev/vulnerability/CVE-2018-14789 · Aviso do Fabricante
• https://usa.philips.com/healthcare/about/customer-support/product-security · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-14789 · Nota de Segurança