Summary
Successful exploitation of these vulnerabilities may allow an attacker to attain elevated privileges and access unauthorized system resources, including access to execute software or to view/update files including patient health information (PHI), directories, or system configuration. This could impact system confidentiality, system integrity, or system availability. Philips has received no reports of exploitation or incidents from clinical associated with these vulnerabilities.
Vulnerabilities 3
-
Unscored —
Philips Brilliance CT devices operate user functions from within a contained kiosk in a Microsoft Windows operating sys…
-
Unscored —
Philips Brilliance CT software (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillan…
-
Unscored —
Vulnerabilities within the Philips Brilliance CT kiosk environment (Brilliance 64 version 2.6.2 and prior, Brilliance i…
Revision history
-
#2
ICSMA-18-123-01 Philips Brilliance Computed Tomography (CT) System (Update A)
-
#1
ICSMA-18-123-01 Philips Brilliance Computed Tomography (CT) System
References
-
ICS Advisory ICSMA-18-123-01 Web Version
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-123-01
-
Recommended Practices
https://www.us-cert.gov/cas/tips/ST04-014.html
-
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B