CVE-2018-8853: High severity Philips Brilliance Firmware 64 vulnerability
Philips Brilliance CT devices operate user functions from within a contained kiosk in a Microsoft Windows operating system. Windows boots by default with elevated Windows privileges, enabling a kiosk application, user, or an attacker to potentially attain unauthorized elevated privileges in Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior. Also, attackers may gain access to unauthorized resources from the underlying Windows operating system.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Philips Brilliance Brilliance 64to a version that resolves this vulnerability.Fixed in 2.6.2 and prior - Upgrade
Upgrade
Philips Brilliance iCTto a version that resolves this vulnerability.Fixed in 4.1.6 and prior - Upgrade
Upgrade
Philips Brilliance iCT SPto a version that resolves this vulnerability.Fixed in 3.2.4 and prior - Upgrade
Upgrade
Philips Brilliance CT Big Boreto a version that resolves this vulnerability.Fixed in 2.3.5 and prior - Compensating control
Harden the Philips Brilliance CT kiosk on Microsoft Windows to prevent the kiosk application/user/attacker from gaining unauthorized elevated privileges via default elevated boot privileges.
Event History
Frequently Asked Questions
What is the severity of CVE-2018-8853?
CVE-2018-8853 has been rated as a high-severity vulnerability due to potential unauthorized access to elevated privileges.
How does CVE-2018-8853 affect Philips Brilliance CT devices?
CVE-2018-8853 affects the functionality of Philips Brilliance CT devices by allowing unauthorized users to elevate their privileges due to default configurations.
How can I mitigate CVE-2018-8853?
Mitigation for CVE-2018-8853 includes ensuring that system configurations limit user privileges and applying any available firmware updates.
Which versions of Philips software are impacted by CVE-2018-8853?
CVE-2018-8853 impacts Philips Brilliance Firmware 64 versions up to 2.6.2, as well as Brilliance ICT SP Firmware versions up to 3.2.4 and Brilliance ICT Firmware versions up to 4.1.6.
Is a patch available for CVE-2018-8853?
Yes, a patch or firmware update is typically provided to address CVE-2018-8853, and users should check for the latest releases from Philips.