Code Execution Vulnerability in IntelliSpace Portal by Philips
CVE-2025-3426

7.2HIGH

Key Information:

Vendor

Philips
Status
Intellispace Portal
Advanced Visualization Workspace
Vendor
CVE Published:
7 April 2025

What is CVE-2025-3426?

The IntelliSpace Portal's binaries lack adequate protection mechanisms, leaving the application vulnerable to reverse engineering. The absence of code obfuscation and protections against decompilation exposes internal logic, allowing attackers to extract sensitive information, such as hardcoded credentials from the PortalUsersDatabase.dll. This file includes critical functions for initializing accounts, which contain encrypted passwords coupled with salt configuration. Attackers can exploit this vulnerability to gain unauthorized access to sensitive system components and operations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Advanced Visualization Workspace Windows 15

IntelliSpace Portal Windows 12 and prior

References

https://www.cve.org/CVERecord?id=CVE-2025-3426
https://www.philips.com/a-w/security/security-advisories....

CVSS V4

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Victor A Morales
Omar A Crespo
JSON
.