Summary
Successful exploitation of this vulnerability may allow a non-authenticated attacker to view or modify information.
Vulnerabilities 1
-
Low 3.6
Philips Ultrasound Systems Authentication Bypass Using an Alternate Path or Channel
In Philips Ultrasound ClearVue Versions 3.2 and prior, Ultrasound CX Versions 5.0.2 and prior, Ultrasound EPIQ/Affiniti Versions VM5.0 and prior, Ultrasound Sparq Version 3.0.2 and prior and Ultrasound Xperius all versions, an attacker may use an alternate pa…
Revision history
-
#1
ICSMA-20-177-01 Philips Ultrasound Systems
References
-
ICS Advisory ICSMA-20-177-01 Web Version
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-20-177-01
-
Recommended Practices
https://www.fda.gov/MedicalDevices/DigitalHealth/ucm373213.htm
-
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B