PT-2018-16977 · Philips · Intellispace Portal

Publicado 2018-03-26 · Atualizado 2019-10-09 · CVE-2018-5468

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Philips Intellispace Portal versions 7.0.x through 8.0.x

Description The issue allows an attacker to gain unauthorized access. In some cases, it could enable the attacker to escalate their level of privilege or execute arbitrary code.

Recommendations For versions 7.0.x through 8.0.x, update to a version that includes a fix for the remote desktop access issue to prevent unauthorized access and potential privilege escalation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2018-5468

Produtos afetados

Intellispace Portal

Referências · 5

• http://securityfocus.com/bid/103182 · Nota
• https://osv.dev/vulnerability/CVE-2018-5468 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-5468 · Nota de Segurança
• https://usa.philips.com/healthcare/about/customer-support/product-security · Aviso do Fabricante
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 · Nota