CVE-2018-14789 Vulnerability Details

  /     /     /  

CVE-2018-14789 Metadata Quick Info

CVE Published: 22/08/2018 | CVE Updated: 16/09/2024 | CVE Year: 2018
Source: icscert | Vendor: Philips | Product: IntelliSpace Cardiovascular (ISCV) products
Status : PUBLISHED

---

CVE-2018-14789 Description

In Philips\' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 3.1 or prior and Xcelera Version 4.1 or prior), an unquoted search path or element vulnerability has been identified, which may allow an attacker to execute arbitrary code and escalate their level of privileges.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-428
CWE Name: UNQUOTED SEARCH PATH OR ELEMENT CWE-428
Source: Philips

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).