CVE-2018-8861: High severity Philips Brilliance Firmware 64 vulnerability

Published May 4, 2018
·
Updated

Vulnerabilities within the Philips Brilliance CT kiosk environment (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior) could enable a limited-access kiosk user or an unauthorized attacker to break-out from the containment of the kiosk environment, attain elevated privileges from the underlying Windows OS, and access unauthorized resources from the operating system.

Affected Software

14 affected components
Philips Brilliance Firmware 64<=2.6.2
Philips Brilliance 64
Philips Brilliance Ict Sp Firmware<=3.2.4
Philips Brilliance Ict Sp
Philips Brilliance Ict Firmware<=4.1.6
Philips Brilliance iCT
Philips Brilliance CT Big Bore Firmware<=2.3.5
Philips Brilliance CT Big Bore
All of the following
Philips Brilliance Firmware 64<=2.6.2
Philips Brilliance 64
All of the following
Philips Brilliance Ict Sp Firmware<=3.2.4
Philips Brilliance Ict Sp
All of the following
Philips Brilliance Ict Firmware<=4.1.6
Philips Brilliance iCT

Event History

May 4, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionWeakness
Data Sourced
via NVD·05:29 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2018-8861?

CVE-2018-8861 has been categorized as a low severity vulnerability.

2

How do I fix CVE-2018-8861?

To mitigate CVE-2018-8861, upgrade the affected Philips Brilliance CT kiosk software to the latest versions available.

3

What are the affected versions for CVE-2018-8861?

CVE-2018-8861 affects Philips Brilliance 64 versions up to 2.6.2, Brilliance iCT versions up to 4.1.6, Brilliance iCT SP versions up to 3.2.4, and Brilliance CT Big Bore versions up to 2.3.5.

4

Who is impacted by CVE-2018-8861?

Limited-access kiosk users and unauthorized attackers could potentially exploit CVE-2018-8861.

5

What type of vulnerability is CVE-2018-8861?

CVE-2018-8861 is a vulnerability that allows limited-access users to potentially gain unauthorized access to sensitive settings.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203