CVE-2018-8854 Vulnerability Details

  /     /     /  

CVE-2018-8854 Metadata Quick Info

CVE Published: 26/09/2018 | CVE Updated: 16/09/2024 | CVE Year: 2018
Source: icscert | Vendor: Philips | Product: e-Alert Unit (non-medical device)
Status : PUBLISHED

---

CVE-2018-8854 Description

Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not properly restrict the size or amount of resources requested or influenced by an actor, which can be used to consume more resources than intended.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-400
CWE Name: UNCONTROLLED RESOURCE CONSUMPTION ( RESOURCE EXHAUSTION ) CWE-400
Source: Philips

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).