Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability where code debugging methods are enabled, which could allow an attacker to remotely execute arbitrary code during runtime.
Weakness
The product is released with debugging code still enabled or active.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Intellispace_portal | Philips | 8.0 (including) | 8.0 (including) |
| Intellispace_portal | Philips | 9.0 (including) | 9.0 (including) |
Potential Mitigations
Related Attack Patterns
References
- http://www.securityfocus.com/bid/103182
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
- https://www.usa.philips.com/healthcare/about/customer-support/product-security
- http://www.securityfocus.com/bid/103182
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
- https://www.usa.philips.com/healthcare/about/customer-support/product-security