PT-2018-14758 · Philips · Philips Healthsuite Health Android App

Published 2018-12-07 · Updated 2019-10-09 · CVE-2018-19001

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Philips HealthSuite Health Android App, all versions.

Description The software uses simple encryption that is not strong enough for the level of protection required.

Recommendations For all versions, consider using alternative, stronger encryption methods until a patch or update is available that addresses this issue. As a temporary workaround, restrict access to sensitive data handled by the app to minimize the risk of exploitation.

Fix

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2018-19001

Affected Products

Philips Healthsuite Health Android App

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-19001 · Security Note
• http://securityfocus.com/bid/106126 · Note
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-340-01 · Note