Back to feed
EUVD-2018-17240 · Published Mar 26, 2018
Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an unquoted search path or element vulnerability that has been identified, which may allow an authorized local user to execute arbitrary code and escalate their level of privileges.
Technologies
Philips Intellispace Portal
Weaknesses
CWE-428CWE-426
CVSS scores
- v3.07.8
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - v2.07.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Execution Privilege Escalation Stealth
References
Potentially impacted assets
See if this affects your attack surface
