CVEvulnerability

CVE-2018-14799

3.7 LOW Published 2018-08-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-08-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
3.7 LOW — CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119, CWE-134, CWE-20

Description

In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, the PageWriter device does not sanitize data entered by user. This can lead to buffer overflow or format string vulnerabilities.

Affected configurations

• philips pagewriter tc70 firmware • philips pagewriter tc50 firmware • philips pagewriter tc30 firmware • philips pagewriter tc20 firmware • philips pagewriter tc10 firmware

Related

Weakness · CWE (3)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
  • CWE-134 Use of Externally-Controlled Format String weakness
  • CWE-20 Improper Input Validation weakness

References