CVSS: 4.6EPSS: 0%CPEs: 10EXPL: 0CVE-2018-14799
https://notcve.org/view.php?id=CVE-2018-14799
22 Aug 2018 — In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, the PageWriter device does not sanitize data entered by user. This can lead to buffer overflow or format string vulnerabilities. En PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs de Philips, en todas las versiones anteriores a mayo de 2018, el dispositivo PageWriter no sanea los datos introducidos por el usuario. Esto puede conducir a vulnerabilidades de desbordamiento de búfer o de cadenas de formato. • http://www.securityfocus.com/bid/105103 • CWE-20: Improper Input Validation CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-134: Use of Externally-Controlled Format String •
CVSS: 7.2EPSS: 0%CPEs: 10EXPL: 0CVE-2018-14801
https://notcve.org/view.php?id=CVE-2018-14801
22 Aug 2018 — In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, an attacker with both the superuser password and physical access can enter the superuser password that can be used to access and modify all settings on the device, as well as allow the user to reset existing passwords. En PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs de Philips, en todas las versiones anteriores a mayo de 2018, un atacante con contraseña de superusuario y acceso físico puede introducir di... • http://www.securityfocus.com/bid/105103 • CWE-798: Use of Hard-coded Credentials •