CVE-2018-8857: High severity Philips Brilliance Firmware 64 vulnerability
Philips Brilliance CT software (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior) contains fixed credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. An attacker could compromise these credentials and gain access to the system.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Operational
Rotate or replace any Philips Brilliance CT fixed credentials (passwords/cryptographic keys) that may have been compromised—specifically for Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior.
Event History
Frequently Asked Questions
What is the severity of CVE-2018-8857?
CVE-2018-8857 is considered a high-severity vulnerability due to the presence of fixed credentials in Philips Brilliance CT software.
How do I fix CVE-2018-8857?
To fix CVE-2018-8857, you should update the Philips Brilliance CT software to the latest version that mitigates the use of fixed credentials.
What versions are affected by CVE-2018-8857?
CVE-2018-8857 affects Philips Brilliance CT software versions 2.6.2 and earlier, as well as several versions of Brilliance iCT and Brilliance CT Big Bore.
What are the consequences of CVE-2018-8857?
The consequences of CVE-2018-8857 include potential unauthorized access to sensitive information due to hard-coded credentials.
Is there a public advisory for CVE-2018-8857?
Yes, there are public advisories available that detail the specifics of CVE-2018-8857 and recommended actions.