Code Execution Vulnerability in IntelliSpace Portal by Philips

CVE-2025-3426

Summary

The IntelliSpace Portal's binaries lack adequate protection mechanisms, leaving the application vulnerable to reverse engineering. The absence of code obfuscation and protections against decompilation exposes internal logic, allowing attackers to extract sensitive information, such as hardcoded credentials from the PortalUsersDatabase.dll. This file includes critical functions for initializing accounts, which contain encrypted passwords coupled with salt configuration. Attackers can exploit this vulnerability to gain unauthorized access to sensitive system components and operations.

References