CVE-2018-5451: philips alice_6_firmware Improper Authentication
Vulnerability summary
CVE-2018-5451 is a critical (CVSS 9.8) Improper Authentication vulnerability in philips alice_6_firmware. EPSS estimates a 2.65% chance of exploitation in the next 30 days, higher than 85.4% of scored vulnerabilities.
Timeline
- 28-03-2018PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
In Philips Alice 6 System version R8.0.2 or prior, when an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct. This weakness can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with sensitive information or the ability to execute arbitrary code.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
2.65%
Chance of exploitation in the next 30 days
Percentile
85%
Versus all other CVEs
30-day change
0.00 pp
From 2.65% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Philips2 products
- alice_6_firmware≤ r8.0.2
- philips alice 6 systemVersion R8.0.2 or prior.
1 vendor · 2 products
References
2 links- ics-cert.us-cert.gov/advisories/ICSMA-18-086-01X Refsource MISCThird Party AdvisoryUS Government Resource