Description (CNA)
In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 3.1 or prior and Xcelera Version 4.1 or prior), an unquoted search path or element vulnerability has been identified, which may allow an attacker to execute arbitrary code and escalate their level of privileges.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Philips / IntelliSpace Cardiovascular (ISCV) products | affected IntelliSpace Cardiovascular, Version 3.1 or prior; affected Xcelera Version 4.1 or prior |
CWE
CWE-428
References
- https://www.usa.philips.com/healthcare/about/customer-support/product-security
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-226-01
ADP enrichment
No English description supplied.