CVE-2020-11618

The CVE-2020-11618 entry concerns THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB‑T2 2.2.1 set‑top boxes where the TELNET service is hardcoded to start on boot. This configuration enables a local network attacker to gain root access via TELNET. Documents consistently describe the issue as har...

CVE-2020-11618

THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes have their TELNET service hardcoded to start on boot, which allows an attacker on the local network to achieve root access via the TELNET protocol...

CVE-2020-11617

The CVE-2020-11617 issue affects the RSS application on THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes. The root cause is that the RSS client does not validate the SSL certificates of RSS servers, enabling a man-in-the-middle attacker to modify data delivered to the cl...

CVE-2020-11617

The RSS application on THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes doesn't validate the SSL certificates of RSS servers, which allows a man-in-the-middle attacker to modify the data delivered to the client...

CVE-2020-14518

Philips DreamMapper, Version 2.24 and prior. Information written to log files can give guidance to a potential attacker...

CVE-2020-16241

Philips SureSigns VS4, A.07.107 and prior does not restrict or incorrectly restricts access to a resource from an unauthorized actor...

CVE-2020-16239

When an actor claims to have a given identity, Philips SureSigns VS4, A.07.107 and prior does not prove or insufficiently proves the claim is correct...

CVE-2020-16239

When an actor claims to have a given identity, Philips SureSigns VS4, A.07.107 and prior does not prove or insufficiently proves the claim is correct...

CVE-2020-16241

Philips SureSigns VS4, A.07.107 and prior does not restrict or incorrectly restricts access to a resource from an unauthorized actor...

CVE-2020-14518

Philips DreamMapper, Version 2.24 and prior. Information written to log files can give guidance to a potential attacker...

CVE-2020-16237

Philips SureSigns VS4, A.07.107 and prior receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly...

Input validation

Philips DreamMapper, Version 2.24 and prior. Information written to log files can give guidance to a potential attacker...

Code injection

Philips SureSigns VS4, A.07.107 and prior. When an actor claims to have a given identity, the software does not prove or insufficiently proves the claim is correct...

Input validation

Philips SureSigns VS4, A.07.107 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly...

Code injection

Philips SureSigns VS4, A.07.107 and prior. The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor...

CVE-2020-16239

CVE-2020-16239 affects Philips SureSigns VS4 (A.07.107 and earlier). Root cause: Improper authentication where an actor’s claimed identity is not adequately proven. Consequence: potential unauthorized access to administrative controls; CVSS base 4.9 (NETWORK, LOW AI, HIGH privileges required, HIG...

CVE-2020-16239 Philips SureSigns VS4 Improper Authentication

When an actor claims to have a given identity, Philips SureSigns VS4, A.07.107 and prior does not prove or insufficiently proves the claim is correct...

CVE-2020-16241

Philips SureSigns VS4 (versions A.07.107 and earlier) is affected by CVE-2020-16241, an Improper Access Control vulnerability that could allow an unauthorized actor to access a resource. The issue is documented in multiple sources (NVD, Red Hat, CVE list, CISA ICS advisory) with evidence of impac...

CVE-2020-16241 Philips SureSigns VS4 Improper Access Control

Philips SureSigns VS4, A.07.107 and prior does not restrict or incorrectly restricts access to a resource from an unauthorized actor...

CVE-2020-16237

CVE-2020-16237 affects Philips SureSigns VS4, specifically versions A.07.107 and earlier. The vulnerability stems from improper input validation where the device may receive data without ensuring it has the required properties, leading to unsafe processing. The authoritative source (ICS-CISA advi...