Description
Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. The Philips e-Alert communication channel is not encrypted which could therefore lead to disclosure of personal contact information and application login credentials from within the same subnet.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Philips | e-Alert Unit (non-medical device) | R2.1 and prior | — |
Advisories 1
- ICSA-18-242-01 Philips e-Alert Unit CISA ICS & IT advisories · Aug 30, 2018