PT-2018-14258 · Philips · Philips Isite+2

Published 2018-11-19 · Updated 2020-09-18 · CVE-2018-17906

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:A/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Philips iSite and IntelliSpace PACS versions all iSite PACS versions all IntelliSpace PACS versions all

Description The issue concerns default credentials and lack of authentication within third-party software, potentially allowing an attacker to compromise a component of the system.

Recommendations For Philips iSite and IntelliSpace PACS versions all, consider changing default credentials and implementing proper authentication mechanisms within third-party software to prevent unauthorized access. For iSite PACS versions all, consider changing default credentials and implementing proper authentication mechanisms within third-party software to prevent unauthorized access. For IntelliSpace PACS versions all, consider changing default credentials and implementing proper authentication mechanisms within third-party software to prevent unauthorized access.

Fix

Missing Authentication

Weakness Enumeration

CWE-1188

CWE-521

CWE-306

Related Identifiers

CVE-2018-17906

Affected Products

Intellispace Pacs

Philips Isite

Isite Pacs

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-17906 · Security Note
• http://securityfocus.com/bid/105875 · Note
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-312-01 · Note