{"id":"CVE-2018-14801","state":"PUBLISHED","title":"In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, an attacker with both the superuser password and physical access can enter the supe","description":"In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, an attacker with both the superuser password and physical access can enter the superuser password that can be used to access and modify all settings on the device, as well as allow the user to reset existing passwords.","publishedAt":"2018-08-22T18:00:00.000Z","updatedAt":"2024-09-17T01:36:43.400Z","severity":null,"assigner":"icscert","products":["Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs"],"affected":[{"vendor":"Philips","product":"PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs","versions":[{"version":"All versions prior to May 2018.","status":"affected"}]}],"references":["https://ics-cert.us-cert.gov/advisories/ICSMA-18-228-01","https://www.usa.philips.com/healthcare/about/customer-support/product-security","http://www.securityfocus.com/bid/105103"],"weaknesses":["CWE-798"],"ingestedAt":"2026-10-29T19:44:20.464Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/14xxx/CVE-2018-14801.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-14801","state":"PUBLISHED","datePublished":"2018-08-22T18:00:00.000Z","dateUpdated":"2024-09-17T01:36:43.400Z","assignerShortName":"icscert","assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateReserved":"2018-08-01T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, an attacker with both the superuser password and physical access can enter the superuser password that can be used to access and modify all settings on the device, as well as allow the user to reset existing passwords."}],"affected":[{"vendor":"Philips","product":"PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs","versions":[{"version":"All versions prior to May 2018.","status":"affected"}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-228-01","tags":["x_refsource_MISC"]},{"url":"https://www.usa.philips.com/healthcare/about/customer-support/product-security","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/105103","name":"105103","tags":["vdb-entry","x_refsource_BID"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-798","description":"USE OF HARD-CODED CREDENTIALS CWE-798","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"icscert","dateUpdated":"2018-08-23T09:57:01.000Z","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6"},"datePublic":"2018-08-16T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"ics-cert@hq.dhs.gov","DATE_PUBLIC":"2018-08-16T00:00:00","ID":"CVE-2018-14801","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs","version":{"version_data":[{"version_value":"All versions prior to May 2018."}]}}]},"vendor_name":"Philips"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, an attacker with both the superuser password and physical access can enter the superuser password that can be used to access and modify all settings on the device, as well as allow the user to reset existing passwords."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"USE OF HARD-CODED CREDENTIALS CWE-798"}]}]},"references":{"reference_data":[{"name":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-228-01","refsource":"MISC","url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-228-01"},{"name":"https://www.usa.philips.com/healthcare/about/customer-support/product-security","refsource":"CONFIRM","url":"https://www.usa.philips.com/healthcare/about/customer-support/product-security"},{"name":"105103","refsource":"BID","url":"http://www.securityfocus.com/bid/105103"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-228-01","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.usa.philips.com/healthcare/about/customer-support/product-security","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/105103","name":"105103","tags":["vdb-entry","x_refsource_BID","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T09:38:13.977Z"}}]}}}