CVE-2018-5468

EUVD-2018-17238
Philips Intellispace Portal all versions 7.0.x and 8.0.x have a remote desktop access vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their level of privilege or execute arbitrary code
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 83%
Affected Products (NVD)
VendorProductVersion
philipsintellispace_portal
8.0
philipsintellispace_portal
9.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/103182
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
https://www.usa.philips.com/healthcare/about/customer-support/product-security
http://www.securityfocus.com/bid/103182
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
https://www.usa.philips.com/healthcare/about/customer-support/product-security