CVEvulnerability
CVE-2018-8854
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-09-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-400
Description
Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not properly restrict the size or amount of resources requested or influenced by an actor, which can be used to consume more resources than intended.
Affected configurations
• philips e-alert firmware (<= r2.1)
Related
Weakness · CWE (1)
- CWE-400 Uncontrolled Resource Consumption weakness
References
- http://www.securityfocus.com/bid/105194 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-242-01 Mitigation, Third Party Advisory, US Government Resource
- https://www.usa.philips.com/healthcare/about/customer-support/product-security Vendor Advisory
- http://www.securityfocus.com/bid/105194 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-242-01 Mitigation, Third Party Advisory, US Government Resource
- https://www.usa.philips.com/healthcare/about/customer-support/product-security Vendor Advisory