PT-2018-16979 · Microsoft+1 · Windows+1

Publicado 2018-03-26 · Atualizado 2019-10-09 · CVE-2018-5472

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Philips Intellispace Portal versions 7.0.x through 8.0.x

Description The issue is related to insecure Windows permissions, which could allow an attacker to gain unauthorized access. In some cases, this could lead to privilege escalation or the execution of arbitrary code.

Recommendations For versions 7.0.x through 8.0.x, consider restricting access to sensitive areas of the system to minimize the risk of exploitation until a fix is available. As a temporary workaround, review and adjust Windows permissions settings to ensure they are set according to the principle of least privilege.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2018-5472

Produtos afetados

Philips Intellispace Portal

Windows

Referências · 5

• http://securityfocus.com/bid/103182 · Nota
• https://osv.dev/vulnerability/CVE-2018-5472 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-5472 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 · Nota
• https://usa.philips.com/healthcare/about/customer-support/product-security · Aviso do Fabricante