PT-2018-16979 · Microsoft+1 · Windows+1

Published 2018-03-26 · Updated 2019-10-09 · CVE-2018-5472

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Philips Intellispace Portal versions 7.0.x through 8.0.x

Description The issue is related to insecure Windows permissions, which could allow an attacker to gain unauthorized access. In some cases, this could lead to privilege escalation or the execution of arbitrary code.

Recommendations For versions 7.0.x through 8.0.x, consider restricting access to sensitive areas of the system to minimize the risk of exploitation until a fix is available. As a temporary workaround, review and adjust Windows permissions settings to ensure they are set according to the principle of least privilege.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2018-5472

Affected Products

Philips Intellispace Portal

Windows

References · 5

• https://osv.dev/vulnerability/CVE-2018-5472 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-5472 · Security Note
• https://usa.philips.com/healthcare/about/customer-support/product-security · Vendor Advisory
• http://securityfocus.com/bid/103182 · Note
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 · Note