Vulnerability in Philips Intellispace Cardiovascular
CVE-2017-14111
The workstation logging function in Philips IntelliSpace Cardiovascular (ISCV) 2.3.0 and earlier and Xcelera R4.1L1 and earlier records domain authentication credentials, which if accessed allows an attacker to use credentials to access the application, or other user entitlements.
EPSS: 0.022 (80.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.2 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Philips Intellispace_cardiovascular
- Philips Xcelera
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Mitigation, Issue Tracking, Vendor Advisory)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- cve@mitre.org (US Government Resource, Third Party Advisory, x_refsource_MISC, Issue Tracking)
Frequently asked questions
- What is CVE-2017-14111?
- CVE-2017-14111 is a high-severity vulnerability in Philips Intellispace Cardiovascular, classified under Insufficiently Protected Credentials. CVSS score: 7.2/10. Published 2017-11-17.
- How severe is CVE-2017-14111?
- High severity. CVSS v3 base score is 7.2 out of 10.