Philips Intellispace Cardiovascular vulnerabilities

4 CVEs affecting Philips Intellispace Cardiovascular, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-14789, published 2018-08-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-14111, published 2017-11-17. High severity, CVSS 7.2. EPSS: 2.2% chance of exploitation in the next 30 days. The workstation logging function in Philips IntelliSpace Cardiovascular (ISCV) 2.3.0 and earlier and Xcelera R4.1L1 and earlier records domain authentication credentials, which if accessed allows an…
CVE-2018-14789, published 2018-08-22. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 3.1 or prior and Xcelera Version 4.1 or prior), an unquoted search path or element vulnerability has been identified, which may…
CVE-2018-5438, published 2018-03-20. Medium severity, CVSS 6.3. EPSS: 0.4% chance of exploitation in the next 30 days. Philips ISCV application prior to version 2.3.0 has an insufficient session expiration vulnerability where an attacker could reuse the session of a previously logged in user. This vulnerability…
CVE-2018-14787, published 2018-08-22. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 2.x or prior and Xcelera Version 4.1 or prior), an attacker with escalated privileges could access folders which contain…