CVE-2018-5472

Published: Mar 26, 2018Modified: Jun 17, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their level of privilege or execute arbitrary code.

Affected (2)

Products: Philips: Intellispace Portal

Philips

1 product

Intellispace Portal

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Philips Intellispace Portal	Version 8.0
Philips Intellispace Portal	Version 9.0

Related CWEs

CWE-264

References (6)

http://www.securityfocus.com/bid/103182

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://www.usa.philips.com/healthcare/about/customer-support/product-security

Source: ics-cert@hq.dhs.gov

Vendor Advisory

http://www.securityfocus.com/bid/103182

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

https://www.usa.philips.com/healthcare/about/customer-support/product-security

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.