Vulnerability in Philips Intellivue_mx40
CVE-2017-9658
Certain 802.11 network management messages have been determined to invoke wireless access point blacklisting security defenses when not required, which can necessitate intervention by hospital staff to reset the device and reestablish a ne…
EPSS: 0.008 (53.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Philips Intellivue_mx40
- Philips Intellivue_mx40_firmware
- Philips Intellivue Mx40 Patient Worn Monitor — versions IntelliVue MX40 Patient Worn Monitor (WLAN only), all versions prior to Version B.06.18
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (x_refsource_CONFIRM, Vendor Advisory)
- ics-cert@hq.dhs.gov (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2017-9658?
- CVE-2017-9658 is a medium-severity vulnerability in Philips Intellivue_mx40, classified under Improper Handling of Exceptional Conditions. CVSS score: 6.5/10. Published 2018-04-30.
- How severe is CVE-2017-9658?
- Medium severity. CVSS v3 base score is 6.5 out of 10.