CVE-2018-5474 Philips Intellispace Portal all versions 7.0.x and 8.0.x have an input validation vulnerability that could allow a remote attacker to execute arbitrary code or cause the application to crash.
CriticalCVSS 9.8
EPSS 6.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Philips Intellispace Portal all versions 7.0.x and 8.0.x have an input validation vulnerability that could allow a remote attacker to execute arbitrary code or cause the application to crash.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Philips intellispace portal | = 8.0 | No fix listed |
| Philips intellispace portal | = 9.0 | No fix listed |
| Philips IntelliSpace Portal | = 8.0.x | No fix listed |
| Philips IntelliSpace Portal | = 7.0.x | No fix listed |
References
- 103182 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource
- www.usa.philips.com vendor-advisory