CVE-2019-13557

Published: Nov 8, 2019Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

In Tasy EMR, Tasy WebPortal Versions 3.02.1757 and prior, there is an information exposure vulnerability which may allow a remote attacker to access system and configuration information.

Affected (2)

Products: Philips: Tasy Emr, Tasy Webportal

Philips

2 products

Tasy Emr

Tasy Webportal

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Philips Tasy Emr	Up to 3.02.1744
Philips Tasy Webportal	Up to 3.02.1757

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://www.us-cert.gov/ics/advisories/ICSMA-19-120-01

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://www.us-cert.gov/ics/advisories/ICSMA-19-120-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.