PT-2018-14758 · Philips · Philips Healthsuite Health Android App

Publicado 2018-12-07 · Atualizado 2019-10-09 · CVE-2018-19001

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Philips HealthSuite Health Android App, all versions.

Description The software uses simple encryption that is not strong enough for the level of protection required.

Recommendations For all versions, consider using alternative, stronger encryption methods until a patch or update is available that addresses this issue. As a temporary workaround, restrict access to sensitive data handled by the app to minimize the risk of exploitation.

Correção

Inadequate Encryption Strength

Enumeração de Fraquezas

CWE-326

Identificadores relacionados

CVE-2018-19001

Produtos afetados

Philips Healthsuite Health Android App

Referências · 3

• http://securityfocus.com/bid/106126 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-340-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-19001 · Nota de Segurança