CVE-2018-8861: philips _brilliance_ct_big_bore_firmware Exposure of Resource to Wrong Sphere
Vulnerability summary
CVE-2018-8861 is a high (CVSS 8.7) Exposure of Resource to Wrong Sphere vulnerability in philips _brilliance_ct_big_bore_firmware. EPSS estimates a 0.40% chance of exploitation in the next 30 days, higher than 32.5% of scored vulnerabilities.
Timeline
- 04-05-2018PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
Vulnerabilities within the Philips Brilliance CT kiosk environment (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior) could enable a limited-access kiosk user or an unauthorized attacker to break-out from the containment of the kiosk environment, attain elevated privileges from the underlying Windows OS, and access unauthorized resources from the operating system.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.40%
Chance of exploitation in the next 30 days
Percentile
33%
Versus all other CVEs
30-day change
-0.01 pp
From 0.40% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Philips5 products
- _brilliance_ct_big_bore_firmware≤ 2.3.5
- brilliance ct scannersBrilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior.
- brilliance_firmware_64≤ 2.6.2
- brilliance_ict_firmware≤ 4.1.6
- brilliance_ict_sp_firmware≤ 3.2.4
1 vendor · 5 products
References
3 links- www.usa.philips.com/healthcare/about/customer-support/product-securityX Refsource CONFIRMVendor Advisory
- ics-cert.us-cert.gov/advisories/ICSMA-18-123-01X Refsource MISCThird Party AdvisoryUS Government Resource