{"id":"CVE-2018-14789","state":"PUBLISHED","title":"In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 3.1 or prior and Xcelera Version 4.1 or prior), an unquoted search path or element vulnerability has been iden","description":"In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 3.1 or prior and Xcelera Version 4.1 or prior), an unquoted search path or element vulnerability has been identified, which may allow an attacker to execute arbitrary code and escalate their level of privileges.","publishedAt":"2018-08-22T18:00:00.000Z","updatedAt":"2024-09-16T17:18:12.900Z","severity":null,"assigner":"icscert","products":["Philips IntelliSpace Cardiovascular (ISCV) products"],"affected":[{"vendor":"Philips","product":"IntelliSpace Cardiovascular (ISCV) products","versions":[{"version":"IntelliSpace Cardiovascular, Version 3.1 or prior","status":"affected"},{"version":"Xcelera Version 4.1 or prior","status":"affected"}]}],"references":["https://www.usa.philips.com/healthcare/about/customer-support/product-security","https://ics-cert.us-cert.gov/advisories/ICSMA-18-226-01"],"weaknesses":["CWE-428"],"ingestedAt":"2026-10-29T19:44:20.464Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/14xxx/CVE-2018-14789.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-14789","state":"PUBLISHED","datePublished":"2018-08-22T18:00:00.000Z","dateUpdated":"2024-09-16T17:18:12.900Z","assignerShortName":"icscert","assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateReserved":"2018-08-01T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 3.1 or prior and Xcelera Version 4.1 or prior), an unquoted search path or element vulnerability has been identified, which may allow an attacker to execute arbitrary code and escalate their level of privileges."}],"affected":[{"vendor":"Philips","product":"IntelliSpace Cardiovascular (ISCV) products","versions":[{"version":"IntelliSpace Cardiovascular, Version 3.1 or prior","status":"affected"},{"version":"Xcelera Version 4.1 or prior","status":"affected"}]}],"references":[{"url":"https://www.usa.philips.com/healthcare/about/customer-support/product-security","tags":["x_refsource_CONFIRM"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-226-01","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-428","description":"UNQUOTED SEARCH PATH OR ELEMENT CWE-428","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"icscert","dateUpdated":"2018-08-22T17:57:01.000Z","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6"},"datePublic":"2018-08-14T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"ics-cert@hq.dhs.gov","DATE_PUBLIC":"2018-08-14T00:00:00","ID":"CVE-2018-14789","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"IntelliSpace Cardiovascular (ISCV) products","version":{"version_data":[{"version_value":"IntelliSpace Cardiovascular, Version 3.1 or prior"},{"version_value":"Xcelera Version 4.1 or prior"}]}}]},"vendor_name":"Philips"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 3.1 or prior and Xcelera Version 4.1 or prior), an unquoted search path or element vulnerability has been identified, which may allow an attacker to execute arbitrary code and escalate their level of privileges."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"UNQUOTED SEARCH PATH OR ELEMENT CWE-428"}]}]},"references":{"reference_data":[{"name":"https://www.usa.philips.com/healthcare/about/customer-support/product-security","refsource":"CONFIRM","url":"https://www.usa.philips.com/healthcare/about/customer-support/product-security"},{"name":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-226-01","refsource":"MISC","url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-226-01"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.usa.philips.com/healthcare/about/customer-support/product-security","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-226-01","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T09:38:13.980Z"}}]}}}