CVE-2018-14799

In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, the PageWriter device does not sanitize data entered by user. This can lead to buffer overflow or format string vulnerabilities.

Score

CVSS 3.0 3.7 Low

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-08-22

Last modified

2024-09-17

Weaknesses

CWE-119, CWE-134, CWE-20

Affected products

• Pagewriter Tc10 (Philips)
• Pagewriter Tc10 Firmware (Philips)
• Pagewriter Tc20 Firmware (Philips)
• Pagewriter Tc30 Firmware (Philips)
• Pagewriter Tc50 Firmware (Philips)
• Pagewriter Tc70 Firmware (Philips)
• Tc20 (Philips)
• Tc30 (Philips)
• Tc50 (Philips)
• Tc70 Cardiographs (Philips)

References

• http://www.securityfocus.com/bid/105103
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-228-01
• https://www.usa.philips.com/healthcare/about/customer-support/product-security