PT-2019-13394

CVE-2019-13530

·

Published

2019-09-12

·

Updated

2019-10-09

Description by

CVSS 3.1
7.2
High
MetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Philips IntelliVue WLAN, portable patient monitors, WLAN Version A, Firmware A.03.09 Philips IntelliVue WLAN, portable patient monitors, WLAN Version B, Firmware A.01.09
Description The issue allows an attacker to use credentials to login via ftp and upload a malicious firmware.
Recommendations For Philips IntelliVue WLAN, portable patient monitors, WLAN Version A, Firmware A.03.09, restrict access to the ftp service to prevent malicious firmware uploads. For Philips IntelliVue WLAN, portable patient monitors, WLAN Version B, Firmware A.01.09, restrict access to the ftp service to prevent malicious firmware uploads.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-798: Use of Hard-coded Credentials
CWE-259: Use of Hard-coded Password
Related identifiers
CVE-2019-13530
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com