CVE-2018-8857
High
Description
Philips Brilliance CT software (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior) contains fixed credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. An attacker could compromise these credentials and gain access to the system.
SeverityHigh
CVSS7.8
Exploit probability—
ProductPhilips Brilliance Firmware
PublishedMay 4, 2018
First seenMay 4, 2018
Weakness typeCWE-798Hard-coded credentials
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| philips brilliance_firmware_64 | v ≤ 2.6.2 | — |
| philips brilliance_ict_sp_firmware | v ≤ 3.2.4 | — |
| philips brilliance_ict_firmware | v ≤ 4.1.6 | — |
| philips _brilliance_ct_big_bore_firmware | v ≤ 2.3.5 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.