CVE-2018-7498

EUVD-2018-19227
In Philips Alice 6 System version R8.0.2 or prior, the lack of proper data encryption passes up the guarantees of confidentiality, integrity, and accountability that properly implemented encryption conveys.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 24%
Affected Products (NVD)
VendorProductVersion
philipsalice_6_firmware
𝑥
≤ r8.0.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/103537
https://ics-cert.us-cert.gov/advisories/ICSMA-18-086-01
http://www.securityfocus.com/bid/103537
https://ics-cert.us-cert.gov/advisories/ICSMA-18-086-01