VULNERABILITY INTELLIGENCE
CVE-2018-5472
CVSS score9.8 CRITICAL
EPSS probability4.51%
CISA KEVNot currently listed
Published2018-03-26
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their level of privilege or execute arbitrary code.
Primary references
- ics-cert@hq.dhs.gov — Third Party Advisory, VDB Entry
- ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
- ics-cert@hq.dhs.gov — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory