CVE-2018-14787

EPSS 0.4%CWE-269

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

22 Aug 2018Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 2.x or prior and Xcelera Version 4.1 or prior), an attacker with escalated privileges could access folders which contain executables where authenticated users have write permissions, and could then execute arbitrary code with local administrative permissions.

Affected products

Philips · IntelliSpace Cardiovascular (ISCV) products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://ics-cert.us-cert.gov/advisories/ICSMA-18-226-01 https://www.usa.philips.com/healthcare/about/customer-support/product-security