CVE-2018-10599

Published: Jun 5, 2018Modified: Nov 21, 2024

5.3

Vector

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.6 / Impact: 3.6

Source: NVD

Description

IntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M, IntelliVue Patient Monitors MX (MX400-550) Rev J-M and (X3/MX100 for Rev M only), and Avalon Fetal/Maternal Monitors FM20/FM30/FM40/FM50 with software Revisions F.0, G.0 and J.3 have a vulnerability that allows an unauthenticated attacker to read memory from an attacker-chosen device address within the same subnet.

Affected (18)

Philips

18 products

Intellivue Mp2 Firmware

Intellivue X2 Firmware

Intellivue Mp30 Firmware

Intellivue Mp50 Firmware

Intellivue Mp70 Firmware

Intellivue Np90 Firmware

Intellivue Mx700 Firmware

Intellivue Mx800 Firmware

Intellivue Mx400 Firmware

Intellivue Mx450 Firmware

Intellivue Mx500 Firmware

Intellivue Mx550 Firmware

Intellivue X3 Firmware

Intellivue Mx100 Firmware

Avalon Fetal/maternal Monitors Fm20 Firmware

Avalon Fetal/maternal Monitors Fm30 Firmware

Avalon Fetal/maternal Monitors Fm40 Firmware

Avalon Fetal/maternal Monitors Fm50 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue Mp2 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue Mp2	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue X2 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue X2	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue Mp30 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue Mp30	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue Mp50 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue Mp50	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue Mp70 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue Mp70	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue Np90 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue Np90	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue Mx700 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue Mx700	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue Mx800 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue Mx800	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue Mx400 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue Mx400	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue Mx450 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue Mx450	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue Mx500 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue Mx500	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue Mx550 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue Mx550	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue X3 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue X3	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue Mx100 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue Mx100	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Avalon Fetal/maternal Monitors Fm20 Firmware	All versions

Running on/with	Platform Versions
Philips Avalon Fetal/maternal Monitors Fm20	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Avalon Fetal/maternal Monitors Fm30 Firmware	All versions

Running on/with	Platform Versions
Philips Avalon Fetal/maternal Monitors Fm30	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Avalon Fetal/maternal Monitors Fm40 Firmware	All versions

Running on/with	Platform Versions
Philips Avalon Fetal/maternal Monitors Fm40	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Avalon Fetal/maternal Monitors Fm50 Firmware	All versions

Running on/with	Platform Versions
Philips Avalon Fetal/maternal Monitors Fm50	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://ics-cert.us-cert.gov/advisories/ICSMA-18-156-01

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://ics-cert.us-cert.gov/advisories/ICSMA-18-156-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.