Philips IntelliSpace Cardiovascular Auth Context Auth Bypass

The vulnerability of the AuthContext token in Philips IntelliSpace Cardiovascular’s image and data management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow attackers to compromise the confidentiality and integrity of the protected...

EUVD-2018-6673

Malware in sbrugna...

EUVD-2018-6671

Malware in sbrugna...

EUVD-2017-5623

Malware in sbrugna...

Philips IntelliSpace Cardiovascular Weak Credentials Unauthorized Access

The vulnerability of Philips IntelliSpace Cardiovascular’s image and data management system lies in the use of weak credentials. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the user accounts...

CVE-2025-2229 Philips Intellispace Cardiovascular (ISCV) Use of Weak Credentials

A token is created using the username, current date/time, and a fixed AES-128 encryption key, which is the same across all installations...

CVE-2025-2229 Philips Intellispace Cardiovascular (ISCV) Use of Weak Credentials

A token is created using the username, current date/time, and a fixed AES-128 encryption key, which is the same across all installations...

CVE-2025-2230 Philips Intellispace Cardiovascular (ISCV) Improper Authentication

A flaw exists in the Windows login flow where an AuthContext token can be exploited for replay attacks and authentication bypass...

CISA Releases Thirteen Industrial Control Systems Advisories

CISA released thirteen Industrial Control Systems ICS advisories on March 13, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-072-01 Siemens Teamcenter Visualization and Tecnomatrix Plant Simulation...

Philips IntelliSpace Cardiovascular and Xcelera Unknown Search Path or Element Vulnerability

Philips IntelliSpace Cardiovascular ISCV and Xcelera are both products of the Dutch company Philips.Philips ISCV is a cardiac imaging information management system.Xcelera is its predecessor. A security vulnerability exists in Philips ISCV version 3.1 and earlier and Xcelera version 4.1 and...

Philips IntelliSpace Cardiovascular and Xcelera Privilege Mismanagement Vulnerability

Philips IntelliSpace Cardiovascular ISCV and Xcelera are both products of the Dutch company Philips.Philips ISCV is a cardiac imaging information management system.Xcelera is its predecessor. A security vulnerability exists in Philips ISCV version 2.x and earlier and Xcelera version 4.1 and...

CVE-2018-14787

In Philips' IntelliSpace Cardiovascular ISCV products ISCV Version 2.x or prior and Xcelera Version 4.1 or prior, an attacker with escalated privileges could access folders which contain executables where authenticated users have write permissions, and could then execute arbitrary code with local...

Path traversal

In Philips' IntelliSpace Cardiovascular ISCV products ISCV Version 3.1 or prior and Xcelera Version 4.1 or prior, an unquoted search path or element vulnerability has been identified, which may allow an attacker to execute arbitrary code and escalate their level of privileges...

CVE-2018-14787

In Philips' IntelliSpace Cardiovascular ISCV products ISCV Version 2.x or prior and Xcelera Version 4.1 or prior, an attacker with escalated privileges could access folders which contain executables where authenticated users have write permissions, and could then execute arbitrary code with local...

CVE-2018-14789

Philips IntelliSpace Cardiovascular (ISCV) and Xcelera are affected by CVE-2018-14789 due to an unquoted search path or element vulnerability in ISCV Version 3.1 or prior and Xcelera Version 4.1 or prior. This flaw can allow an attacker with local access to execute arbitrary code and escalate pri...

CVE-2018-14789: Unquoted Search Path or Element

In Philips' IntelliSpace Cardiovascular ISCV products ISCV Version 3.1 or prior and Xcelera Version 4.1 or prior, an unquoted search path or element vulnerability has been identified, which may allow an attacker to execute arbitrary code and escalate their level of privileges...

PT-2018-12721

Name of the Vulnerable Software and Affected Versions IntelliSpace Cardiovascular versions 2.x and earlier Xcelera versions 4.1 and earlier Description An issue exists where an attacker with escalated privileges could access folders containing executables where authenticated users have write...

PT-2018-12723

Name of the Vulnerable Software and Affected Versions IntelliSpace Cardiovascular versions 3.1 and earlier Xcelera versions 4.1 and earlier Description An unquoted search path or element issue has been identified, which may allow an attacker to execute arbitrary code and escalate their level of...

CVE-2018-14787: Improper Privilege Management

In Philips' IntelliSpace Cardiovascular ISCV products ISCV Version 2.x or prior and Xcelera Version 4.1 or prior, an attacker with escalated privileges could access folders which contain executables where authenticated users have write permissions, and could then execute arbitrary code with local...

Design/Logic Flaw

The workstation logging function in Philips IntelliSpace Cardiovascular ISCV 2.3.0 and earlier and Xcelera R4.1L1 and earlier records domain authentication credentials, which if accessed allows an attacker to use credentials to access the application, or other user entitlements...