Summary
Successful exploitation of this vulnerability could allow an attacker to access credentials to the hospital 's clinical information systems (EMR).
Vulnerabilities 1
-
Low 2.0
Philips IntelliBridge Enterprise IBE Insertion of Sensitive Information into Log File
Philips IntelliBridge Enterprise (IBE), Versions B.12 and prior, IntelliBridge Enterprise system integration with SureSigns (VS4), EarlyVue (VS30) and IntelliVue Guardian (IGS). Unencrypted user credentials received in the IntelliBridge Enterprise (IBE) are l…
Revision history
-
#1
ICSMA-20-163-01 Philips IntelliBridge Enterprise IBE
References
-
ICS Advisory ICSMA-20-163-01 Web Version
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-20-163-01
-
Recommended Practices
https://www.fda.gov/MedicalDevices/DigitalHealth/ucm373213.htm
-
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B