7.8
CVE-2018-8857
- EPSS 0.06%
- Published 04.05.2018 17:29:00
- Last modified 21.11.2024 04:14:27
- Source ics-cert@hq.dhs.gov
- Teams watchlist Login
- Open Login
Philips Brilliance CT software (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior) contains fixed credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. An attacker could compromise these credentials and gain access to the system.
Data is provided by the National Vulnerability Database (NVD)
Philips ≫ Brilliance Firmware 64 Version <= 2.6.2
Philips ≫ Brilliance Ict Sp Firmware Version <= 3.2.4
Philips ≫ Brilliance Ict Firmware Version <= 4.1.6
Philips ≫ Brilliance Ct Big Bore Firmware Version <= 2.3.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.06% | 0.162 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
CWE-798 Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.