PT-2019-13398 · Philips · Philips Intellivue Wlan

Published 2019-09-12 · Updated 2019-10-09 · CVE-2019-13534

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Philips IntelliVue WLAN versions A.03.09 Philips IntelliVue WLAN versions A.01.09

Description The issue concerns the product downloading source code or an executable from a remote location and executing the code without sufficiently verifying its origin and integrity.

Recommendations For Philips IntelliVue WLAN version A.03.09, update the firmware to a version that includes the fix for this issue. For Philips IntelliVue WLAN version A.01.09, consider disabling the execution of remote code until a patch is available.

Fix

Weakness Enumeration

CWE-494

Related Identifiers

CVE-2019-13534

Affected Products

Philips Intellivue Wlan

References · 3

• https://osv.dev/vulnerability/CVE-2019-13534 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-13534 · Security Note
• https://us-cert.gov/ics/advisories/icsma-19-255-01 · Note