PT-2018-12736

Name of the Vulnerable Software and Affected Versions Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs versions prior to May 2018 Description The issue allows an attacker with physical access and the superuser password to access and modify all settings on the device, as well as reset...

CVE-2018-14799: Improper Input Validation

In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, the PageWriter device does not sanitize data entered by user. This can lead to buffer overflow or format string vulnerabilities...

CVE-2018-14801: Use of Hard-coded Credentials

In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, an attacker with both the superuser password and physical access can enter the superuser password that can be used to access and modify all settings on the device, as well as allow the user to reset...

Multiple Philips Products Incorrectly Validated Vulnerability

Philips PageWriter TC10 Cardiograph and others are different models of electrocardiograph equipment from Philips Netherlands. A security vulnerability exists in a number of Philips products, which stems from the device not validating user-submitted data. An attacker could exploit the vulnerabilit...