Philips
Philips E-alert Firmware: vulnerabilidades y CVE
Philips E-alert Firmware tiene 10 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE10
Últimos 12 meses0
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-0922 | Media (6.5) | 0.40% | — | 1 abr 2022 | The software does not perform any authentication for critical system functionality. |
| CVE-2018-8856 | Crítica (9.8) | 1.4% | — | 26 sept 2018 | Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software contains hard-coded cryptographic key, which it uses for encryption of internal data. |
| CVE-2018-8854 | Alta (7.5) | 2.5% | — | 26 sept 2018 | Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not properly restrict the size or amount of resources requested or influenced by an actor, which can be used to consume more resources… |
| CVE-2018-8852 | Alta (8.8) | 1.9% | — | 26 sept 2018 | Philips e-Alert Unit (non-medical device), Version R2.1 and prior. When authenticating a user or otherwise establishing a new user session, the software gives an attacker the opportunity to steal authenticated sessions… |
| CVE-2018-8850 | Crítica (9.8) | 3.8% | — | 26 sept 2018 | Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not validate input properly, allowing an attacker to craft the input in a form that is not expected by the rest of the application.… |
| CVE-2018-8848 | Alta (7.5) | 2.0% | — | 26 sept 2018 | Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software, upon installation, sets incorrect permissions for an object that exposes it to an unintended actor. |
| CVE-2018-8846 | Media (6.1) | 1.3% | — | 26 sept 2018 | Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is… |
| CVE-2018-8844 | Alta (8.8) | 0.87% | — | 26 sept 2018 | Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The web application does not, or cannot, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who… |
| CVE-2018-8842 | Alta (8.8) | 0.57% | — | 26 sept 2018 | Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. The… |
| CVE-2018-14803 | Media (5.3) | 1.7% | — | 26 sept 2018 | Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The Philips e-Alert contains a banner disclosure vulnerability that could allow attackers to obtain extraneous product information, such as OS and… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.