medium6.2
CVE-2018-14801
In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, an attacker with both the superuser password and physical acce…
Impact
In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, an attacker with both the superuser password and physical access can enter the superuser password that can be used to access and modify all settings on the device, as well as allow the user to reset existing passwords.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Philips | Pagewriter Tc70 Firmware | All versions |
| Philips | Pagewriter Tc50 Firmware | All versions |
| Philips | Pagewriter Tc30 Firmware | All versions |
| Philips | Pagewriter Tc20 Firmware | All versions |
| Philips | Pagewriter Tc10 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/105103
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-228-01
- https://www.usa.philips.com/healthcare/about/customer-support/product-security
- http://www.securityfocus.com/bid/105103
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-228-01
- https://www.usa.philips.com/healthcare/about/customer-support/product-security