← voltar
CVE-2025-2230

Philips Intellispace Cardiovascular (ISCV) Improper Authentication

CVSS 8.5 HIGHEPSS 0.2%CWE-287
A flaw exists in the Windows login flow where an AuthContext token can be exploited for replay attacks and authentication bypass.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Philips · Intellispace Cardiovascular (ISCV)

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-072-01https://www.philips.com/a-w/security/security-advisories.html