PT-2018-8516 · Philips · Philips Dosewise Portal

Publicado 2018-04-24 · Atualizado 2019-10-09 · CVE-2017-9654

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Philips DoseWise Portal versions 1.1.7.333 and 2.1.1.3069

Description The issue concerns the storage of login credentials in clear text within backend system files. This affects the security of user authentication data.

Recommendations For version 1.1.7.333, update the software to a version that securely stores login credentials. For version 2.1.1.3069, update the software to a version that securely stores login credentials. As a temporary workaround, consider restricting access to the backend system files to minimize the risk of exploitation.

Correção

Insufficiently Protected Credentials

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-522

CWE-312

Identificadores relacionados

CVE-2017-9654

Produtos afetados

Philips Dosewise Portal

Referências · 5

• https://ics-cert.us-cert.gov/advisories/ICSMA-17-229-01 · Nota
• http://securityfocus.com/bid/100471 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-9654 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-9654 · Aviso do Fabricante
• http://philips.com/productsecurity · Aviso do Fabricante