CVE-2018-5470 Vulnerability Details

  /     /     /  

CVE-2018-5470 Metadata Quick Info

CVE Published: 26/03/2018 | CVE Updated: 16/09/2024 | CVE Year: 2018
Source: icscert | Vendor: Philips | Product: Philips IntelliSpace Portal
Status : PUBLISHED

---

CVE-2018-5470 Description

Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an unquoted search path or element vulnerability that has been identified, which may allow an authorized local user to execute arbitrary code and escalate their level of privileges.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-428
CWE Name: UNQUOTED SEARCH PATH OR ELEMENT CWE-428
Source: Philips

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).