CVE-2018-5464

Published: Mar 26, 2018Modified: Jun 17, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an untrusted SSL certificate vulnerability this could allow an attacker to gain unauthorized access to resources and information.

Affected (2)

Products: Philips: Intellispace Portal

Philips

1 product

Intellispace Portal

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Philips Intellispace Portal	Version 8.0
Philips Intellispace Portal	Version 9.0

Related CWEs

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

CWE-310

References (6)

http://www.securityfocus.com/bid/103182

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://www.usa.philips.com/healthcare/about/customer-support/product-security

Source: ics-cert@hq.dhs.gov

Vendor Advisory

http://www.securityfocus.com/bid/103182

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

https://www.usa.philips.com/healthcare/about/customer-support/product-security

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.