PT-2018-16979
CVE-2018-5472
·
Published
2018-03-26
·
Updated
2019-10-09
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Philips Intellispace Portal versions 7.0.x through 8.0.x
Description
The issue is related to insecure Windows permissions, which could allow an attacker to gain unauthorized access. In some cases, this could lead to privilege escalation or the execution of arbitrary code.
Recommendations
For versions 7.0.x through 8.0.x, consider restricting access to sensitive areas of the system to minimize the risk of exploitation until a fix is available. As a temporary workaround, review and adjust Windows permissions settings to ensure they are set according to the principle of least privilege.
Found an issue in the description? Have something to add? Feel free to write us 👾