CVEvulnerability
CVE-2017-14111
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-11-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.2 HIGH — CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-522
Description
The workstation logging function in Philips IntelliSpace Cardiovascular (ISCV) 2.3.0 and earlier and Xcelera R4.1L1 and earlier records domain authentication credentials, which if accessed allows an attacker to use credentials to access the application, or other user entitlements.
Affected configurations
• philips intellispace cardiovascular (<= 2.3.0)
• philips xcelera (<= r4.1l1)
Related
Weakness · CWE (1)
- CWE-522 Insufficiently Protected Credentials weakness
References
- http://www.securityfocus.com/bid/101850 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSMA-17-318-01 Issue Tracking, Third Party Advisory, US Government Resource
- https://www.usa.philips.com/healthcare/about/customer-support/product-security Issue Tracking, Mitigation, Vendor Advisory
- http://www.securityfocus.com/bid/101850 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSMA-17-318-01 Issue Tracking, Third Party Advisory, US Government Resource
- https://www.usa.philips.com/healthcare/about/customer-support/product-security Issue Tracking, Mitigation, Vendor Advisory