PT-2018-14258 · Philips · Philips Isite+2

Publicado 2018-11-19 · Atualizado 2020-09-18 · CVE-2018-17906

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:A/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Philips iSite and IntelliSpace PACS versions all iSite PACS versions all IntelliSpace PACS versions all

Description The issue concerns default credentials and lack of authentication within third-party software, potentially allowing an attacker to compromise a component of the system.

Recommendations For Philips iSite and IntelliSpace PACS versions all, consider changing default credentials and implementing proper authentication mechanisms within third-party software to prevent unauthorized access. For iSite PACS versions all, consider changing default credentials and implementing proper authentication mechanisms within third-party software to prevent unauthorized access. For IntelliSpace PACS versions all, consider changing default credentials and implementing proper authentication mechanisms within third-party software to prevent unauthorized access.

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-1188

CWE-521

CWE-306

Identificadores relacionados

CVE-2018-17906

Produtos afetados

Intellispace Pacs

Philips Isite

Isite Pacs

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-17906 · Nota de Segurança
• http://securityfocus.com/bid/105875 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-312-01 · Nota