Code injection

2018-09-2619:29:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.0%

JSON

Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software, upon installation, sets incorrect permissions for an object that exposes it to an unintended actor.

CPENameOperatorVersion
e-alert_firmwareeq<= r2.1

CPE	Name	Operator	Version
	e-alert_firmware	eq	<= r2.1

References

www.securityfocus.com/bid/105194

ics-cert.us-cert.gov/advisories/ICSA-18-242-01

www.usa.philips.com/healthcare/about/customer-support/product-security