High severity · published Apr 24, 2018
CVE-2017-9654
The Philips DoseWise Portal web-based application versions 1.1.7.333 and 2.1.1.3069 stores login credentials in clear text within backend system files
8.8
CVSS
1%
EPSS
No
On KEV
Description
The Philips DoseWise Portal web-based application versions 1.1.7.333 and 2.1.1.3069 stores login credentials in clear text within backend system files. CVSS v3 base score: 6.5, CVSS vector string: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DO
Dosewise · Philips
1.1.7.333; 2.1.1.3069 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-9654
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-9654
Vendor Advisory
http://www.philips.com/productsecurity
Third Party Advisory
http://www.securityfocus.com/bid/100471
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-17-229-01
More from Dosewise
9.1
CVE-2017-9656
The backend database of the Philips DoseWise Portal application versions 1.1.7.333 and 2.1.1.3069 uses hard-coded credentials for a database account with privileges that can…