Vulnerability Details CVE-2018-14801
In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, an attacker with both the superuser password and physical access can enter the superuser password that can be used to access and modify all settings on the device, as well as allow the user to reset existing passwords.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 35.0%
CVSS Severity
CVSS v3 Score 6.2
CVSS v2 Score 7.2
References
- http://www.securityfocus.com/bid/105103
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-228-01
- https://www.usa.philips.com/healthcare/about/customer-support/product-security
- http://www.securityfocus.com/bid/105103
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-228-01
- https://www.usa.philips.com/healthcare/about/customer-support/product-security
Products affected by CVE-2018-14801
-
cpe:2.3:h:philips:pagewriter_tc10:-
-
cpe:2.3:h:philips:pagewriter_tc20:-
-
cpe:2.3:h:philips:pagewriter_tc30:-
-
cpe:2.3:h:philips:pagewriter_tc50:-
-
cpe:2.3:h:philips:pagewriter_tc70:-
-
cpe:2.3:o:philips:pagewriter_tc10_firmware:-
-
cpe:2.3:o:philips:pagewriter_tc20_firmware:-
-
cpe:2.3:o:philips:pagewriter_tc30_firmware:-
-
cpe:2.3:o:philips:pagewriter_tc50_firmware:-
-
cpe:2.3:o:philips:pagewriter_tc70_firmware:-