Philips Alice 6 Firmware vulnerabilities

2 CVEs affecting Philips Alice 6 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-7498, published 2018-03-28.

More from Philips.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-5451, published 2018-03-28. Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days. In Philips Alice 6 System version R8.0.2 or prior, when an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct. This weakness can…
• CVE-2018-7498, published 2018-03-28. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. In Philips Alice 6 System version R8.0.2 or prior, the lack of proper data encryption passes up the guarantees of confidentiality, integrity, and accountability that properly implemented encryption…