CVE-2018-8856
First published: Wed Sep 26 2018(Updated: )
Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software contains hard-coded cryptographic key, which it uses for encryption of internal data.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Philips E-alert Firmware | <=r2.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-8856?
CVE-2018-8856 is a vulnerability found in Philips e-Alert Unit (non-medical device) Version R2.1 and prior. The software contains a hard-coded cryptographic key, which it uses for encryption of internal data.
How severe is CVE-2018-8856?
CVE-2018-8856 has a severity rating of 9.8, which is classified as critical.
Is there a fix available for CVE-2018-8856?
Yes, Philips has released updated firmware to address the vulnerability. It is recommended to install the latest version of the Philips e-Alert Unit firmware (version R2.1.1 or later).
Where can I find more information about CVE-2018-8856?
You can find more information about CVE-2018-8856 at the following references: [SecurityFocus](http://www.securityfocus.com/bid/105194), [US-CERT Advisory](https://ics-cert.us-cert.gov/advisories/ICSA-18-242-01), [Philips Product Security](https://www.usa.philips.com/healthcare/about/customer-support/product-security).
What is the CWE ID of CVE-2018-8856?
The CWE ID of CVE-2018-8856 is CWE-798, which stands for Use of Hard-coded Credentials.
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/type
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/philips
- canonical/philips e-alert firmware
- version/philips e-alert firmware/r2.1