Description (CNA)
In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, an attacker with both the superuser password and physical access can enter the superuser password that can be used to access and modify all settings on the device, as well as allow the user to reset existing passwords.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Philips / PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs | affected All versions prior to May 2018. |
CWE
CWE-798
References
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-228-01
- https://www.usa.philips.com/healthcare/about/customer-support/product-security
- http://www.securityfocus.com/bid/105103
ADP enrichment
No English description supplied.