PT-2018-18666 · Philips · Philips E-Alert Unit

Published 2018-09-26 · Updated 2019-10-09 · CVE-2018-8854

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Philips e-Alert Unit (non-medical device) versions R2.1 and prior

Description The software does not properly restrict the size or amount of resources requested or influenced by an actor, which can be used to consume more resources than intended.

Recommendations For Philips e-Alert Unit (non-medical device) versions R2.1 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2018-8854

Affected Products

Philips E-Alert Unit

References · 5

• https://usa.philips.com/healthcare/about/customer-support/product-security · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-8854 · Security Note
• https://osv.dev/vulnerability/CVE-2018-8854 · Vendor Advisory
• http://securityfocus.com/bid/105194 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-18-242-01 · Note