Philips Intellivue MX40 Firmware vulnerabilities

2 CVEs affecting Philips Intellivue MX40 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-9658, published 2018-04-30.

More from Philips.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-9658, published 2018-04-30. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. Certain 802.11 network management messages have been determined to invoke wireless access point blacklisting security defenses when not required, which can necessitate intervention by hospital staff…
• CVE-2017-9657, published 2018-04-30. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. Under specific 802.11 network conditions, a partial re-association of the Philips IntelliVue MX40 Version B.06.18 WLAN monitor to the central monitoring station is possible. In this state, the…