CVE-2017-9654 The Philips DoseWise Portal web-based application versions 1.1.7.333 and 2.1.1.3069 stores login credentials in clear text within backend system files. CVSS v3 base score: 6.5, CVSS vector string: AV:...
HighCVSS 8.8
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Philips DoseWise Portal web-based application versions 1.1.7.333 and 2.1.1.3069 stores login credentials in clear text within backend system files. CVSS v3 base score: 6.5, CVSS vector string: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Philips dosewise | = 1.1.7.333 | No fix listed |
| Philips dosewise | = 2.1.1.3069 | No fix listed |
| Philips DoseWise Portal | = 1.1.7.333 | No fix listed |
| Philips DoseWise Portal | = 2.1.1.3069 | No fix listed |
References
- www.philips.com vendor-advisory
- 100471 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource