CVE-2018-14801

State: Published
Severity: Not scored
Published: Aug 22, 2018
Updated: Sep 17, 2024
Reserved: Aug 1, 2018

Description

In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, an attacker with both the superuser password and physical access can enter the superuser password that can be used to access and modify all settings on the device, as well as allow the user to reset existing passwords.

Scores

The record has no CVSS score.

Weaknesses

CWE-798 USE OF HARD-CODED CREDENTIALS CWE-798

Affected Products

Product	Versions
PageWriter TC10, TC20, TC30, TC50, TC70 CardiographsPhilips	All versions prior to May 2018.Affected

References

https://ics-cert.us-cert.gov/advisories/ICSMA-18-228-01
https://www.usa.philips.com/healthcare/about/customer-support/product-security
105103vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.