CVE-2018-7498

2018-03-2817:00:00

CWE-311

icscert

www.cve.org

AI Score

9.5

Confidence

High

EPSS

0.002

Percentile

52.9%

JSON

In Philips Alice 6 System version R8.0.2 or prior, the lack of proper data encryption passes up the guarantees of confidentiality, integrity, and accountability that properly implemented encryption conveys.

CNA Affected

[
  {
    "product": "Philips Alice 6 System",
    "vendor": "Philips",
    "versions": [
      {
        "status": "affected",
        "version": "Version R8.0.2 or prior."
      }
    ]
  }
]

References

www.securityfocus.com/bid/103537

ics-cert.us-cert.gov/advisories/ICSMA-18-086-01