Description (CNA)
The Philips DoseWise Portal web-based application versions 1.1.7.333 and 2.1.1.3069 stores login credentials in clear text within backend system files. CVSS v3 base score: 6.5, CVSS vector string: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Philips / DoseWise Portal | affected 1.1.7.333; affected 2.1.1.3069 |
CWE
CWE-312
References
- http://www.securityfocus.com/bid/100471
- https://ics-cert.us-cert.gov/advisories/ICSMA-17-229-01
- http://www.philips.com/productsecurity
ADP enrichment
No English description supplied.