CVE-2025-2230: Philips Intellispace Cardiovascular (ISCV) Improper Authentication
A flaw exists in the Windows login flow where an AuthContext token can be exploited for replay attacks and authentication bypass.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Philips Intellispace Cardiovascular (ISCV)to a version that resolves this vulnerability.Fixed in 5.2
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2230?
CVE-2025-2230 has a high severity rating due to its potential for exploitation through replay attacks and authentication bypass.
How do I fix CVE-2025-2230?
To fix CVE-2025-2230, apply the latest security patch provided by Philips for the Intellispace Cardiovascular software.
What are the impacts of CVE-2025-2230?
The impacts of CVE-2025-2230 include unauthorized access to systems and sensitive data due to the authentication bypass vulnerability.
Is CVE-2025-2230 being actively exploited?
As of now, there have been reports indicating that CVE-2025-2230 is being targeted by attackers for exploitation.
Who is affected by CVE-2025-2230?
Organizations using Philips Intellispace Cardiovascular software are specifically affected by CVE-2025-2230.