CVEvulnerability
CVE-2018-14801
6.2 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-08-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.2 MEDIUM — CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-798
Description
In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, an attacker with both the superuser password and physical access can enter the superuser password that can be used to access and modify all settings on the device, as well as allow the user to reset existing passwords.
Affected configurations
• philips pagewriter tc70 firmware
• philips pagewriter tc50 firmware
• philips pagewriter tc30 firmware
• philips pagewriter tc20 firmware
• philips pagewriter tc10 firmware
Related
Weakness · CWE (1)
- CWE-798 Use of Hard-coded Credentials weakness
References
- http://www.securityfocus.com/bid/105103 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-228-01 Third Party Advisory, US Government Resource, VDB Entry
- https://www.usa.philips.com/healthcare/about/customer-support/product-security Vendor Advisory
- http://www.securityfocus.com/bid/105103 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-228-01 Third Party Advisory, US Government Resource, VDB Entry
- https://www.usa.philips.com/healthcare/about/customer-support/product-security Vendor Advisory