CVE-2018-5472

EPSS 1.94%
Published 26.03.2018 14:29:00
Last modified 21.11.2024 04:08:52
Source ics-cert@hq.dhs.gov
Teams watchlist Login
Open Login

Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their level of privilege or execute arbitrary code.

Affected products Warnungen 0 Metrics 3 CWE 0 References 6

Data is provided by the National Vulnerability Database (NVD)

Philips ≫ Intellispace Portal Version8.0

Philips ≫ Intellispace Portal Version9.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.94%	0.826

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02

Third Party Advisory

US Government Resource

https://www.usa.philips.com/healthcare/about/customer-support/product-security

Vendor Advisory

http://www.securityfocus.com/bid/103182

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2018-5472

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-5472

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-5472

EUVD