CVE-2019-13530

Philips IntelliVue WLAN, portable patient monitors, WLAN Version A, Firmware A.03.09, WLAN Version A, Firmware A.03.09, Part #: M8096-67501, WLAN Version B, Firmware A.01.09, Part #: N/A (Replaced by Version C) and WLAN Version B, Firmware A.01.09, Part #: N/A (Replaced by Version C). An attacker can use these credentials to login via ftp and upload a malicious firmware.

Score

CVSS 3.1 7.2 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2019-09-12

Last modified

2024-08-04

Weaknesses

CWE-259, CWE-798

Affected products

• Intellivue Mp Monitors Mp20-mp90 Firmware (Philips)
• Intellivue Mp Monitors Mp2/x2 Firmware (Philips)
• Intellivue Mp Monitors Mp5/5sc Firmware (Philips)
• Intellivue Mp Monitors Mx800/700/600 Firmware (Philips)

References

• https://www.us-cert.gov/ics/advisories/icsma-19-255-01