CVE-2019-18263 — n/a / Philips Veradius Unity, Pulsera, and Endura Dual WAN Router

Description (CNA)

An issue was found in Philips Veradius Unity, Pulsera, and Endura Dual WAN Router, Veradius Unity (718132) with wireless option (shipped between 2016-August 2018), Veradius Unity (718132) with ViewForum option (shipped between 2016-August 2018), Pulsera (718095) and Endura (718075) with wireless option (shipped between 26-June-2017 through 07-August 2018), Pulsera (718095) and Endura (718075) with ViewForum option (shipped between 26-June-2017 through 07-August 2018). The router software uses an encryption scheme that is not strong enough for the level of protection required.

Affected (CNA)

Vendor / product	Versions
n/a / Philips Veradius Unity, Pulsera, and Endura Dual WAN Router	affected Veradius Unity (718132) with wireless option (shipped between 2016-August 2018), Veradius Unity (718132) with ViewForum option (shipped between 2016-August 2018), Pulsera (718095) and Endura (718075) with wireless option (shipped between 26-June-2017 through 07-August 2018), Pulsera (718095) and Endura (718075) with ViewForum option (shipped between 26-June-2017 through 07-August 2018)

CWE

CWE-326

References

https://www.us-cert.gov/ics/advisories/icsma-19-353-01

ADP enrichment

CVE

No English description supplied.

https://www.us-cert.gov/ics/advisories/icsma-19-353-01