Vulnerabilidades en Philips
88 resultadosAnálisis Vexday
Com 88 CVEs catalogadas e nenhuma em exploração ativa no CISA KEV, a taxa de exploração confirmada da Philips está abaixo da média geral do catálogo, o que representa um perfil de risco relativamente contido no momento. Não há registros de vulnerabilidades críticas, PoCs públicas disponíveis ou novas ocorrências nos últimos 90 dias, indicando ausência de pressão ofensiva imediata. O maior score EPSS observado é 0,0625, registrado na CVE-2018-5474, que permanece como a vulnerabilidade de maior atenção no portfólio atual. O tipo de falha mais recorrente é CWE-20 (validação inadequada de entrada), padrão que merece atenção contínua em processos de desenvolvimento e revisão de código.
CVE-2022-0922MEDIUMICSMA-22-088-01 Philips e-AlertEPSS 0.4%CVE-2018-14787—In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 2.x or prior and Xcelera Version 4.1 or prior), an attacker with escalEPSS 0.4%CVE-2020-16212—Philips Patient Monitoring Devices Exposure of Resource to Wrong SphereEPSS 0.4%CVE-2020-16228—Philips Patient Monitoring Devices Improper Check for Certificate RevocationEPSS 0.4%CVE-2021-43548MEDIUMPhilips Patient Information Center iX (PIC iX) and Efficia CM Series Improper Input ValidationEPSS 0.4%CVE-2018-8853—Philips Brilliance CT devices operate user functions from within a contained kiosk in a Microsoft Windows operating system. Windows boots byEPSS 0.4%CVE-2020-16247MEDIUMPhilips Clinical Collaboration Platform ConfigurationEPSS 0.4%CVE-2026-3555HIGHPhilips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2020-16237LOWPhilips SureSigns VS4 Improper Input ValidationEPSS 0.3%CVE-2023-40704MEDIUMPhilips Vue PACS Use of Default CredentialsEPSS 0.3%CVE-2019-10968—Philips Holter 2010 Plus, all versions. A vulnerability has been identified that may allow system options that were not purchased to be enabEPSS 0.3%CVE-2025-3425HIGHUnauthenticated Remote Code Execution via .NET DeserializationEPSS 0.3%CVE-2018-8857—Philips Brilliance CT software (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.EPSS 0.3%CVE-2020-14477LOWPhilips Ultrasound Systems Authentication Bypass Using an Alternate Path or ChannelEPSS 0.3%CVE-2026-3562MEDIUMPhilips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass VulnerabilityEPSS 0.3%CVE-2020-14506LOWPhilips Clinical Collaboration Platform Cross-site Request ForgeryEPSS 0.3%CVE-2020-16220—Philips Patient Monitoring Devices Improper Validation of Syntactic Correctness of InputEPSS 0.3%CVE-2021-32993HIGHPhilips IntelliBridge EC 40 and EC 80 Hub Use of Hard-coded CredentialsEPSS 0.3%CVE-2021-42744MEDIUMPhilips MRI 1.5T and 3T Information ExposureEPSS 0.3%CVE-2020-16241MEDIUMPhilips SureSigns VS4 Improper Access ControlEPSS 0.3%