PT-2018-8519 · Philips · Philips Intellivue Mx40

Publicado 2018-04-30 · Atualizado 2019-10-09 · CVE-2017-9658

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Philips IntelliVue MX40 Version B.06.18 and earlier

Description The issue arises when certain 802.11 network management messages unnecessarily trigger wireless access point blacklisting security defenses. This can require hospital staff to intervene, resetting the device to reestablish a network connection. During this time, the device can either connect to an alternative access point or remain in local monitoring mode until reset. The estimated number of potentially affected devices is not specified.

Recommendations For Philips IntelliVue MX40 Version B.06.18 and earlier, apply the software update to Version B.06.18 or later to fix the issue and implement mitigations that reduce the risk associated with improper handling of exceptional conditions.

Correção

Improper Handling of Exceptional Conditions

Enumeração de Fraquezas

CWE-755

Identificadores relacionados

CVE-2017-9658

Produtos afetados

Philips Intellivue Mx40

Referências · 5

• https://osv.dev/vulnerability/CVE-2017-9658 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-9658 · Nota de Segurança
• https://usa.philips.com/healthcare/about/customer-support/product-security · Aviso do Fabricante
• http://securityfocus.com/bid/100813 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSMA-17-255-01 · Nota