PT-2025-11220 · Philips+1 · Intellispace Cardiovascular+1

Joe Dillon · Published 2025-03-13 · Updated 2025-03-18 · CVE-2025-2229

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined.

Description: A token is created using the username, current date/time, and a fixed AES-128 encryption key, which is the same across all installations.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1391

Related Identifiers

BDU:2025-03892

CVE-2025-2229

Affected Products

Intellispace Cardiovascular

Philips Intellispace Cardiovascular

References · 17

• https://bdu.fstec.ru/vul/2025-03892 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-2229 · Security Note
• https://twitter.com/transilienceai/status/1900704716272837022 · Twitter Post
• https://twitter.com/syedaquib77/status/1900255038708343197 · Twitter Post
• https://philips.com/a-w/security/security-advisories.html · Note
• https://twitter.com/transilienceai/status/1900336776427782296 · Twitter Post
• https://twitter.com/transilienceai/status/1900892993676341419 · Twitter Post
• https://twitter.com/transilienceai/status/1901061880468140278 · Twitter Post
• https://twitter.com/transilienceai/status/1901243521522131038 · Twitter Post
• https://twitter.com/syedaquib77/status/1901849680541270064 · Twitter Post
• https://twitter.com/CveFindCom/status/1900253406616338729 · Twitter Post
• https://twitter.com/transilienceai/status/1901608626915033431 · Twitter Post
• https://twitter.com/transilienceai/status/1901423536910328231 · Twitter Post
• https://t.me/cvedetector/20251 · Telegram Post
• https://t.me/cvetracker/19083 · Telegram Post