What is CVE-2018-5451?

CVE-2018-5451 is a critical-severity vulnerability in Philips Alice 6, classified under Improper Authentication. CVSS score: 9.8/10. Published 2018-03-28.

How severe is CVE-2018-5451?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Auth bypass in Philips Alice 6

CVE-2018-5451

In Philips Alice 6 System version R8.0.2 or prior, when an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct. This weakness can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with sensitive information or the ability to execute arbitrary code.

Vulnerability class: Broken Authentication

EPSS: 0.027 (84.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Philips Alice_6
Philips Alice_6_firmware
Philips Alice 6 System — versions Version R8.0.2 or prior.

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
ics-cert@hq.dhs.gov (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2018-5451?: CVE-2018-5451 is a critical-severity vulnerability in Philips Alice 6, classified under Improper Authentication. CVSS score: 9.8/10. Published 2018-03-28.
How severe is CVE-2018-5451?: Critical severity. CVSS v3 base score is 9.8 out of 10.