CVE-2018-14799

{"id": "CVE-2018-14799", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 3.7, "attackVector": "PHYSICAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 0.3}]}, "published": "2018-08-22T18:29:00.543", "references": [{"url": "http://www.securityfocus.com/bid/105103", "tags": ["Third Party Advisory", "VDB Entry"], "source": "ics-cert@hq.dhs.gov"}, {"url": "https://ics-cert.us-cert.gov/advisories/ICSMA-18-228-01", "tags": ["Third Party Advisory", "US Government Resource", "VDB Entry"], "source": "ics-cert@hq.dhs.gov"}, {"url": "https://www.usa.philips.com/healthcare/about/customer-support/product-security", "tags": ["Vendor Advisory"], "source": "ics-cert@hq.dhs.gov"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}, {"lang": "en", "value": "CWE-134"}]}, {"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, the PageWriter device does not sanitize data entered by user. This can lead to buffer overflow or format string vulnerabilities."}, {"lang": "es", "value": "En PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs de Philips, en todas las versiones anteriores a mayo de 2018, el dispositivo PageWriter no sanea los datos introducidos por el usuario. Esto puede conducir a vulnerabilidades de desbordamiento de b\u00fafer o de cadenas de formato."}], "lastModified": "2019-10-09T23:35:14.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:philips:pagewriter_tc70_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4378EF65-AB49-4C95-9675-A7168C26EA6E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:philips:pagewriter_tc70:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "12F9B749-DE7D-41A5-BAF7-708AC7F35585"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:philips:pagewriter_tc50_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7E24AEF-BA2A-4C1D-AFC5-C288D7C4D427"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:philips:pagewriter_tc50:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "39A545DD-D24D-4A60-9D8E-C4D91E0D3177"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:philips:pagewriter_tc30_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1284BDE8-B494-442B-B08D-AB89B14E48FE"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:philips:pagewriter_tc30:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4F06EBD5-A0DB-4765-BE19-B2AC12584C4F"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:philips:pagewriter_tc20_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AE3507D1-ACD7-46ED-BEE6-4F2BF5A6523D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:philips:pagewriter_tc20:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8A7CE458-4702-4385-857E-827F80468665"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:philips:pagewriter_tc10_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6A583C57-D084-40FC-AA55-1672A8CF13A7"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:philips:pagewriter_tc10:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "563B938A-1F22-4D60-A48E-30D43713198E"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "ics-cert@hq.dhs.gov"}