CVE-2018-14789

2018-08-1400:00:00

CWE-428

icscert

www.cve.org

0.0004 Low

EPSS

Percentile

10.4%

JSON

In Philips’ IntelliSpace Cardiovascular (ISCV) products (ISCV Version 3.1 or prior and Xcelera Version 4.1 or prior), an unquoted search path or element vulnerability has been identified, which may allow an attacker to execute arbitrary code and escalate their level of privileges.

CNA Affected

[
  {
    "product": "IntelliSpace Cardiovascular (ISCV) products",
    "vendor": "Philips",
    "versions": [
      {
        "status": "affected",
        "version": "IntelliSpace Cardiovascular, Version 3.1 or prior"
      },
      {
        "status": "affected",
        "version": "Xcelera Version 4.1 or prior"
      }
    ]
  }
]