Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-8842

Опубликовано: 26 сент. 2018
Источник: nvd
CVSS3: 8.8
CVSS2: 3.3
EPSS Низкий

Описание

Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. The Philips e-Alert communication channel is not encrypted which could therefore lead to disclosure of personal contact information and application login credentials from within the same subnet.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:philips:e-alert_firmware:*:*:*:*:*:*:*:*
Версия до r2.1 (включая)

EPSS

Процентиль: 66%
0.00518
Низкий

8.8 High

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-319
CWE-319

Связанные уязвимости

CVSS3: 8.8
github
больше 3 лет назад

Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. The Philips e-Alert communication channel is not encrypted which could therefore lead to disclosure of personal contact information and application login credentials from within the same subnet.

EPSS

Процентиль: 66%
0.00518
Низкий

8.8 High

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-319
CWE-319