CVE-2018-5470
Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an unquoted search path or element vulnerability that has been identified, which may allow an authorized local user to execute arbitrary code and escalate their level of privileges.
- Score
- CVSS 3.0 7.8 High
- Status
- Modified - ics-cert@hq.dhs.gov
- Published
- 2018-03-26
- Last modified
- 2024-09-16
- Weaknesses
- CWE-426, CWE-428
Affected products
References
- http://www.securityfocus.com/bid/103182
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
- https://www.usa.philips.com/healthcare/about/customer-support/product-security
