CVE-2018-8842: vulnerability in Philips e-Alert Unit (non-medical device)
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.6%
Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. The Philips e-Alert communication channel is not encrypted which could therefore lead to disclosure of personal contact information and application login credentials from within the same subnet.
Affected products
Philips · e-Alert Unit (non-medical device)Related CVEs — Philips e-Alert Unit (non-medical device)
In the same product, most dangerous first.