CVEvulnerability

CVE-2018-17906

8.8 HIGH Published 2018-11-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-11-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
3.3 LOW — AV:A/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-1188, CWE-306, CWE-521

Description

Philips iSite and IntelliSpace PACS, iSite PACS, all versions, and IntelliSpace PACS, all versions. Default credentials and no authentication within third party software may allow an attacker to compromise a component of the system.

Affected configurations

• philips intellispace pacs • philips isite pacs

Related

Weakness · CWE (3)

  • CWE-1188 Initialization of a Resource with an Insecure Default weakness
  • CWE-306 Missing Authentication for Critical Functionality weakness
  • CWE-521 Weak Password Requirements weakness

References