CVE-2018-5472 Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their le...
CriticalCVSS 9.8
EPSS 4.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their level of privilege or execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Philips intellispace portal | = 8.0 | No fix listed |
| Philips intellispace portal | = 9.0 | No fix listed |
| Philips IntelliSpace Portal | = 8.0.x | No fix listed |
| Philips IntelliSpace Portal | = 7.0.x | No fix listed |
References
- 103182 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource
- www.usa.philips.com vendor-advisory