Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2018-8861
Modified
More InfoOfficial Page
Source-ics-cert@hq.dhs.gov
View Known Exploited Vulnerability (KEV) details
Published At-04 May, 2018 | 17:29
Updated At-09 Oct, 2019 | 23:42

Vulnerabilities within the Philips Brilliance CT kiosk environment (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior) could enable a limited-access kiosk user or an unauthorized attacker to break-out from the containment of the kiosk environment, attain elevated privileges from the underlying Windows OS, and access unauthorized resources from the operating system.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.08.7HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
Primary2.06.8MEDIUM
AV:L/AC:L/Au:N/C:C/I:C/A:P
Type: Primary
Version: 3.0
Base score: 8.7
Base severity: HIGH
Vector:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
Type: Primary
Version: 2.0
Base score: 6.8
Base severity: MEDIUM
Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:P
CPE Matches

Philips
philips
>>brilliance_firmware_64>>Versions up to 2.6.2(inclusive)
cpe:2.3:o:philips:brilliance_firmware_64:*:*:*:*:*:*:*:*
Philips
philips
>>brilliance_64>>-
cpe:2.3:h:philips:brilliance_64:-:*:*:*:*:*:*:*
Philips
philips
>>brilliance_ict_sp_firmware>>Versions up to 3.2.4(inclusive)
cpe:2.3:o:philips:brilliance_ict_sp_firmware:*:*:*:*:*:*:*:*
Philips
philips
>>brilliance_ict_sp>>-
cpe:2.3:h:philips:brilliance_ict_sp:-:*:*:*:*:*:*:*
Philips
philips
>>brilliance_ict_firmware>>Versions up to 4.1.6(inclusive)
cpe:2.3:o:philips:brilliance_ict_firmware:*:*:*:*:*:*:*:*
Philips
philips
>>brilliance_ict>>-
cpe:2.3:h:philips:brilliance_ict:-:*:*:*:*:*:*:*
Philips
philips
>>_brilliance_ct_big_bore_firmware>>Versions up to 2.3.5(inclusive)
cpe:2.3:o:philips:_brilliance_ct_big_bore_firmware:*:*:*:*:*:*:*:*
Philips
philips
>>_brilliance_ct_big_bore>>-
cpe:2.3:h:philips:_brilliance_ct_big_bore:-:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
NVD-CWE-noinfoPrimarynvd@nist.gov
CWE-668Secondaryics-cert@hq.dhs.gov
CWE ID: NVD-CWE-noinfo
Type: Primary
Source: nvd@nist.gov
CWE ID: CWE-668
Type: Secondary
Source: ics-cert@hq.dhs.gov
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
http://www.securityfocus.com/bid/104088ics-cert@hq.dhs.gov
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSMA-18-123-01ics-cert@hq.dhs.gov
Third Party Advisory
US Government Resource
https://www.usa.philips.com/healthcare/about/customer-support/product-securityics-cert@hq.dhs.gov
Vendor Advisory
Hyperlink: http://www.securityfocus.com/bid/104088
Source: ics-cert@hq.dhs.gov
Resource:
Third Party Advisory
VDB Entry
Hyperlink: https://ics-cert.us-cert.gov/advisories/ICSMA-18-123-01
Source: ics-cert@hq.dhs.gov
Resource:
Third Party Advisory
US Government Resource
Hyperlink: https://www.usa.philips.com/healthcare/about/customer-support/product-security
Source: ics-cert@hq.dhs.gov
Resource:
Vendor Advisory
Change History
0Changes found

Details not found