Read the docs

Philips

Records121All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical12CVSS 9.0–10.0
CVSS high57CVSS 7.0–8.9

Exploited now

Philips records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

11 records in Intellispace Portal · all components

Priority CRITICAL 97KEV

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 20…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.93307 Published 2017-03-17 No fix listed
Priority CRITICAL 93KEV

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute a…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.99497 Published 2017-04-12 No fix listed
Priority MEDIUM 51

Philips Intellispace Portal all versions 7.0.x and 8.0.x have an input validation vulnerability that could allow a remote attacker to execute arbitrary code or cause the application to crash.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06052 Published 2018-03-26 No fix listed CWE-20
Priority MEDIUM 49

Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their level of privilege or…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0451 Published 2018-03-26 No fix listed CWE-264
Priority MEDIUM 49

Philips Intellispace Portal all versions 7.0.x and 8.0.x have a remote desktop access vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their level of privilege or execute…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0451 Published 2018-03-26 No fix listed CWE-264
Priority LOW 37

Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a self-signed SSL certificate vulnerability this could allow an attacker to gain unauthorized access to resources and information.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01915 Published 2018-03-26 No fix listed CWE-310
Priority LOW 37

Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an untrusted SSL certificate vulnerability this could allow an attacker to gain unauthorized access to resources and information.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01915 Published 2018-03-26 No fix listed CWE-310
Priority LOW 37

Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an SSL incorrect hostname certificate vulnerability this could allow an attacker to gain unauthorized access to resources and information.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01915 Published 2018-03-26 No fix listed CWE-310
Priority LOW 35

Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an unquoted search path or element vulnerability that has been identified, which may allow an authorized local user to execute arbitrary code and escalate…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00549 Published 2018-03-26 No fix listed CWE-428
Priority LOW 35

Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability using SSL legacy encryption that could allow an attacker to gain unauthorized access to resources and information.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01238 Published 2018-03-26 No fix listed CWE-310
Open these records in search →