First published: Tue Jun 05 2018(Updated: )
IntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M, IntelliVue Patient Monitors MX (MX400-550) Rev J-M and (X3/MX100 for Rev M only), and Avalon Fetal/Maternal Monitors FM20/FM30/FM40/FM50 with software Revisions F.0, G.0 and J.3 have a vulnerability that allows an unauthenticated attacker to read memory from an attacker-chosen device address within the same subnet.
Credit: ics-cert@hq.dhs.gov
Affected Software | Affected Version | How to fix |
---|---|---|
Philips Intellivue MP2 | ||
Philips Intellivue MP2 | ||
Philips Intellivue X2 Firmware | ||
Philips Intellivue X2 Firmware | ||
Philips Intellivue Mp30 Firmware | ||
Philips Intellivue Mp30 Firmware | ||
Philips Intellivue Mp50 Firmware | ||
Philips Intellivue Mp50 Firmware | ||
Philips Intellivue Mp70 Firmware | ||
Philips Intellivue Mp70 Firmware | ||
Philips Intellivue NP90 Firmware | ||
Philips Intellivue NP90 Firmware | ||
Philips Intellivue MP Monitors MX800/700/600 Firmware | ||
Philips Intellivue MP Monitors MX800/700/600 Firmware | ||
Philips Intellivue MP Monitors MX800/700/600 Firmware | ||
Philips Intellivue Mx800 Firmware | ||
Philips Intellivue Mx400 Firmware | ||
Philips Intellivue Mx400 Firmware | ||
Philips Intellivue Mx450 Firmware | ||
Philips Intellivue Mx450 Firmware | ||
Philips Intellivue Mx500 | ||
Philips Intellivue Mx500 Firmware | ||
Philips Intellivue Mx550 | ||
Philips Intellivue Mx550 Firmware | ||
Philips Intellivue X3 Firmware | ||
Philips Intellivue X3 Firmware | ||
Philips Intellivue Mx100 Firmware | ||
Philips Intellivue Mx100 Firmware | ||
Philips Avalon Fetal/Maternal Monitors FM20 Firmware | ||
Philips Avalon Fetal/Maternal Monitors FM20 | ||
Philips Avalon Fetal/Maternal Monitors FM30 Firmware | ||
Philips Avalon Fetal/Maternal Monitors FM30 | ||
Philips Avalon Fetal/Maternal Monitors FM40 Firmware | ||
Philips Avalon Fetal/Maternal Monitors Fm40 | ||
Philips Avalon Fetal/Maternal Monitors FM50 Firmware | ||
Philips Avalon Fetal/maternal Monitors Fm50 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this issue is CVE-2018-10599.
CVE-2018-10599 has a severity level of 5.3 (medium).
IntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M, IntelliVue Patient Monitors MX (MX400-550) Rev J-M, and Avalon Fetal/Maternal Monitors FM20/FM30/FM40/FM50 with software Revisions F.0, G.0 and J.3 are affected by CVE-2018-10599.
The CWE ID for CVE-2018-10599 is CWE-200.
You can find more information about CVE-2018-10599 at the following reference: [link](https://ics-cert.us-cert.gov/advisories/ICSMA-18-156-01).