PT-2019-13398 · Philips · Philips Intellivue Wlan

Publicado 2019-09-12 · Atualizado 2019-10-09 · CVE-2019-13534

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Philips IntelliVue WLAN versions A.03.09 Philips IntelliVue WLAN versions A.01.09

Description The issue concerns the product downloading source code or an executable from a remote location and executing the code without sufficiently verifying its origin and integrity.

Recommendations For Philips IntelliVue WLAN version A.03.09, update the firmware to a version that includes the fix for this issue. For Philips IntelliVue WLAN version A.01.09, consider disabling the execution of remote code until a patch is available.

Correção

Enumeração de Fraquezas

CWE-494

Identificadores relacionados

CVE-2019-13534

Produtos afetados

Philips Intellivue Wlan

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-13534 · Aviso do Fabricante
• https://us-cert.gov/ics/advisories/icsma-19-255-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-13534 · Nota de Segurança