CVE-2018-8857
First published: Fri May 04 2018(Updated: )
Philips Brilliance CT software (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior) contains fixed credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. An attacker could compromise these credentials and gain access to the system.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Philips Brilliance Firmware 64 | <=2.6.2 | |
| Philips Brilliance 64 | ||
| Philips Brilliance Ict Sp Firmware | <=3.2.4 | |
| Philips Brilliance Ict Sp | ||
| Philips Brilliance Ict Firmware | <=4.1.6 | |
| Philips Brilliance Ict | ||
| Philips Brilliance Ct Big Bore Firmware | <=2.3.5 | |
| Philips Brilliance Ct Big Bore |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-8857?
CVE-2018-8857 is considered a high-severity vulnerability due to the presence of fixed credentials in Philips Brilliance CT software.
How do I fix CVE-2018-8857?
To fix CVE-2018-8857, you should update the Philips Brilliance CT software to the latest version that mitigates the use of fixed credentials.
What versions are affected by CVE-2018-8857?
CVE-2018-8857 affects Philips Brilliance CT software versions 2.6.2 and earlier, as well as several versions of Brilliance iCT and Brilliance CT Big Bore.
What are the consequences of CVE-2018-8857?
The consequences of CVE-2018-8857 include potential unauthorized access to sensitive information due to hard-coded credentials.
Is there a public advisory for CVE-2018-8857?
Yes, there are public advisories available that detail the specifics of CVE-2018-8857 and recommended actions.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/references
- agent/author
- agent/weakness
- agent/severity
- agent/tags
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- vendor/philips
- canonical/philips brilliance firmware 64
- version/philips brilliance firmware 64/2.6.2
- canonical/philips brilliance 64
- canonical/philips brilliance ict sp firmware
- version/philips brilliance ict sp firmware/3.2.4
- canonical/philips brilliance ict sp
- canonical/philips brilliance ict firmware
- version/philips brilliance ict firmware/4.1.6
- canonical/philips brilliance ict
- canonical/philips brilliance ct big bore firmware
- version/philips brilliance ct big bore firmware/2.3.5
- canonical/philips brilliance ct big bore