Data Encryption Vulnerability in Philips Alice 6 System
CVE-2018-7498

9.8CRITICAL

Key Information:

Vendor
Philips
Status
Philips Alice 6 System
Vendor
CVE Published:
28 March 2018

Summary

The Philips Alice 6 System, specifically versions R8.0.2 and earlier, is affected by a vulnerability due to improper implementation of data encryption. This oversight compromises fundamental security principles, namely confidentiality, integrity, and accountability, which are essential for protecting sensitive information from unauthorized access and manipulation.

Affected Version(s)

Philips Alice 6 System Version R8.0.2 or prior.

References

https://ics-cert.us-cert.gov/advisories/ICSMA-18-086-01
x_refsource_MISC
http://www.securityfocus.com/bid/103537
vdb-entryx_refsource_BID

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.