CVE-2018-14801 Vulnerability Details

  /     /     /  

CVE-2018-14801 Metadata Quick Info

CVE Published: 22/08/2018 | CVE Updated: 17/09/2024 | CVE Year: 2018
Source: icscert | Vendor: Philips | Product: PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs
Status : PUBLISHED

---

CVE-2018-14801 Description

In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, an attacker with both the superuser password and physical access can enter the superuser password that can be used to access and modify all settings on the device, as well as allow the user to reset existing passwords.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-798
CWE Name: USE OF HARD-CODED CREDENTIALS CWE-798
Source: Philips

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).