← Back

CVE-2019-18263

nvd nist
Published: Dec 20, 2019Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

An issue was found in Philips Veradius Unity, Pulsera, and Endura Dual WAN Router, Veradius Unity (718132) with wireless option (shipped between 2016-August 2018), Veradius Unity (718132) with ViewForum option (shipped between 2016-August 2018), Pulsera (718095) and Endura (718075) with wireless option (shipped between 26-June-2017 through 07-August 2018), Pulsera (718095) and Endura (718075) with ViewForum option (shipped between 26-June-2017 through 07-August 2018). The router software uses an encryption scheme that is not strong enough for the level of protection required.

Affected (3)

Philips
3 products
Veradius Unity Firmware
Pulsera Firmware
Endura Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Veradius Unity Firmware
All versions
Running on/withPlatform Versions
Philips
Veradius Unity
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Pulsera Firmware
All versions
Running on/withPlatform Versions
Philips
Pulsera
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Endura Firmware
All versions
Running on/withPlatform Versions
Philips
Endura
All versions

Related CWEs

CWE-326
Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (2)

Source: ics-cert@hq.dhs.gov
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.