Summary
Successful exploitation may allow an attacker to gain visibility to usernames/passwords and personal data. Insufficient encryption and cryptographic integrity checks can lead to altered, corrupted, or disclosed sensitive data. Disclosure of personal data can occur by replacing a trusted node with a malicious node.
Vulnerabilities 2
-
Unscored —
In Philips Alice 6 System version R8.0.2 or prior, when an actor claims to have a given identity, the software does not…
-
Unscored —
In Philips Alice 6 System version R8.0.2 or prior, the lack of proper data encryption passes up the guarantees of confi…
Revision history
-
#3
ICSMA-18-086-01 Philips Alice 6 Vulnerabilities (Update B)
-
#2
ICSMA-18-086-01 Philips Alice 6 Vulnerabilities (Update A)
-
#1
ICSMA-18-086-01 Philips Alice 6 Vulnerabilities
References
-
ICS Advisory ICSMA-18-086-01 Web Version
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-086-01
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B