CVE-2018-8854

Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not properly restrict the size or amount of resources requested or influenced by an actor, which can be used to consume more resources than intended.

Score

CVSS 3.0 7.5 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-09-26

Last modified

2024-09-16

Weaknesses

CWE-400

Affected products

• E-alert Firmware (Philips)
• E-alert Unit Non-medical Device (Philips)

References

• http://www.securityfocus.com/bid/105194
• https://ics-cert.us-cert.gov/advisories/ICSA-18-242-01
• https://www.usa.philips.com/healthcare/about/customer-support/product-security