PT-2018-16979

CVE-2018-5472

·

Published

2018-03-26

·

Updated

2019-10-09

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Philips Intellispace Portal versions 7.0.x through 8.0.x
Description The issue is related to insecure Windows permissions, which could allow an attacker to gain unauthorized access. In some cases, this could lead to privilege escalation or the execution of arbitrary code.
Recommendations For versions 7.0.x through 8.0.x, consider restricting access to sensitive areas of the system to minimize the risk of exploitation until a fix is available. As a temporary workaround, review and adjust Windows permissions settings to ensure they are set according to the principle of least privilege.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾