VULNERABILITY INTELLIGENCE

CVE-2018-14799

CVSS score3.7 LOW

EPSS probability0.50%

CISA KEVNot currently listed

Published2018-08-22

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Description

In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, the PageWriter device does not sanitize data entered by user. This can lead to buffer overflow or format string vulnerabilities.

Weakness classification

ics-cert@hq.dhs.gov: CWE-20
nvd@nist.gov: CWE-119

Primary references

ics-cert@hq.dhs.gov — Third Party Advisory, VDB Entry
ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource, VDB Entry
ics-cert@hq.dhs.gov — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory