Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-8861

Опубликовано: 04 мая 2018
Источник: nvd
CVSS3: 8.7
CVSS2: 6.8
EPSS Низкий

Описание

Vulnerabilities within the Philips Brilliance CT kiosk environment (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior) could enable a limited-access kiosk user or an unauthorized attacker to break-out from the containment of the kiosk environment, attain elevated privileges from the underlying Windows OS, and access unauthorized resources from the operating system.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:philips:brilliance_firmware_64:*:*:*:*:*:*:*:*
Версия до 2.6.2 (включая)
cpe:2.3:h:philips:brilliance_64:-:*:*:*:*:*:*:*
Конфигурация 2

Одновременно

cpe:2.3:o:philips:brilliance_ict_sp_firmware:*:*:*:*:*:*:*:*
Версия до 3.2.4 (включая)
cpe:2.3:h:philips:brilliance_ict_sp:-:*:*:*:*:*:*:*
Конфигурация 3

Одновременно

cpe:2.3:o:philips:brilliance_ict_firmware:*:*:*:*:*:*:*:*
Версия до 4.1.6 (включая)
cpe:2.3:h:philips:brilliance_ict:-:*:*:*:*:*:*:*
Конфигурация 4

Одновременно

cpe:2.3:o:philips:_brilliance_ct_big_bore_firmware:*:*:*:*:*:*:*:*
Версия до 2.3.5 (включая)
cpe:2.3:h:philips:_brilliance_ct_big_bore:-:*:*:*:*:*:*:*

EPSS

Процентиль: 35%
0.00144
Низкий

8.7 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-668
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 8.7
github
больше 3 лет назад

Vulnerabilities within the Philips Brilliance CT kiosk environment (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior) could enable a limited-access kiosk user or an unauthorized attacker to break-out from the containment of the kiosk environment, attain elevated privileges from the underlying Windows OS, and access unauthorized resources from the operating system.

EPSS

Процентиль: 35%
0.00144
Низкий

8.7 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-668
NVD-CWE-noinfo