Summary
Successful exploitation of this vulnerability could allow an attacker access to the log file information containing descriptive error messages.
Vulnerabilities 1
-
Medium 5.3
Philips DreamMapper Insertion of Sensitive Information into Log File
Philips DreamMapper, Version 2.24 and prior. Information written to log files can give guidance to a potential attacker.
Revision history
-
#1
ICSMA-20-212-01 Philips DreamMapper
References
-
ICS Advisory ICSMA-20-212-01 Web Version
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-20-212-01
-
Recommended Practices
https://www.fda.gov/MedicalDevices/DigitalHealth/ucm373213.htm
-
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B