CVE-2018-14787: philips intellispace_cardiovascular Improper Privilege Management
Vulnerability summary
CVE-2018-14787 is a high (CVSS 7.8) Improper Privilege Management vulnerability in philips intellispace_cardiovascular. EPSS estimates a 0.39% chance of exploitation in the next 30 days, higher than 31.7% of scored vulnerabilities.
Timeline
- 22-08-2018PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 2.x or prior and Xcelera Version 4.1 or prior), an attacker with escalated privileges could access folders which contain executables where authenticated users have write permissions, and could then execute arbitrary code with local administrative permissions.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.39%
Chance of exploitation in the next 30 days
Percentile
32%
Versus all other CVEs
30-day change
0.00 pp
From 0.39% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Philips3 products
- intellispace_cardiovascular≤ 3.1
- intellispace cardiovascular (iscv) productsIntelliSpace Cardiovascular, Version 3.1 or prior | Xcelera Version 4.1 or prior
- xcelera≤ 4.1
1 vendor · 3 products
References
2 links- www.usa.philips.com/healthcare/about/customer-support/product-securityX Refsource CONFIRMVendor Advisory
- ics-cert.us-cert.gov/advisories/ICSMA-18-226-01X Refsource MISCThird Party AdvisoryUS Government Resource