CVE-2018-10597

HIGH

8.3

Descricao

IntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M, IntelliVue Patient Monitors MX (MX400-550) Rev J-M and (X3/MX100 for Rev M only), and Avalon Fetal/Maternal Monitors FM20/FM30/FM40/FM50 with software Revisions F.0, G.0 and J.3 have a vulnerability that allows an unauthenticated attacker to access memory ("write-what-where") from an attacker-chosen device address within the same subnet.

Detalhes CVE

Pontuacao CVSS v3.18.3

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Vetor de ataqueADJACENT_NETWORK

ComplexidadeHIGH

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado6/5/2018

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

philips:avalon_fetal\/maternal_monitors_fm20philips:avalon_fetal\/maternal_monitors_fm20_firmwarephilips:avalon_fetal\/maternal_monitors_fm30philips:avalon_fetal\/maternal_monitors_fm30_firmwarephilips:avalon_fetal\/maternal_monitors_fm40philips:avalon_fetal\/maternal_monitors_fm40_firmwarephilips:avalon_fetal\/maternal_monitors_fm50philips:avalon_fetal\/maternal_monitors_fm50_firmwarephilips:intellivue_mp2philips:intellivue_mp2_firmwarephilips:intellivue_mp30philips:intellivue_mp30_firmwarephilips:intellivue_mp50philips:intellivue_mp50_firmwarephilips:intellivue_mp70philips:intellivue_mp70_firmwarephilips:intellivue_mx100philips:intellivue_mx100_firmwarephilips:intellivue_mx400philips:intellivue_mx400_firmwarephilips:intellivue_mx450philips:intellivue_mx450_firmwarephilips:intellivue_mx500philips:intellivue_mx500_firmwarephilips:intellivue_mx550philips:intellivue_mx550_firmwarephilips:intellivue_mx700philips:intellivue_mx700_firmwarephilips:intellivue_mx800philips:intellivue_mx800_firmwarephilips:intellivue_np90philips:intellivue_np90_firmwarephilips:intellivue_x2philips:intellivue_x2_firmwarephilips:intellivue_x3philips:intellivue_x3_firmware

Fraquezas (CWE)

CWE-287CWE-787

Referencias

https://ics-cert.us-cert.gov/advisories/ICSMA-18-156-01(ics-cert@hq.dhs.gov)

https://ics-cert.us-cert.gov/advisories/ICSMA-18-156-01(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.