{"id":"CVE-2018-5470","state":"PUBLISHED","title":"Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an unquoted search path or element vulnerability that has been identified, which may allow an authorized local use","description":"Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an unquoted search path or element vulnerability that has been identified, which may allow an authorized local user to execute arbitrary code and escalate their level of privileges.","publishedAt":"2018-03-26T14:00:00.000Z","updatedAt":"2024-09-16T23:01:40.163Z","severity":null,"assigner":"icscert","products":["Philips Philips IntelliSpace Portal"],"affected":[{"vendor":"Philips","product":"Philips IntelliSpace Portal","versions":[{"version":"8.0.x","status":"affected"},{"version":"7.0.x","status":"affected"}]}],"references":["https://www.usa.philips.com/healthcare/about/customer-support/product-security","http://www.securityfocus.com/bid/103182","https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02"],"weaknesses":["CWE-428"],"ingestedAt":"2026-10-29T19:44:56.034Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/5xxx/CVE-2018-5470.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-5470","state":"PUBLISHED","datePublished":"2018-03-26T14:00:00.000Z","dateUpdated":"2024-09-16T23:01:40.163Z","assignerShortName":"icscert","assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateReserved":"2018-01-12T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an unquoted search path or element vulnerability that has been identified, which may allow an authorized local user to execute arbitrary code and escalate their level of privileges."}],"affected":[{"vendor":"Philips","product":"Philips IntelliSpace Portal","versions":[{"version":"8.0.x","status":"affected"},{"version":"7.0.x","status":"affected"}]}],"references":[{"url":"https://www.usa.philips.com/healthcare/about/customer-support/product-security","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/103182","name":"103182","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-428","description":"UNQUOTED SEARCH PATH OR ELEMENT CWE-428","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"icscert","dateUpdated":"2018-03-27T09:57:01.000Z","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6"},"datePublic":"2018-02-27T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"ics-cert@hq.dhs.gov","DATE_PUBLIC":"2018-02-27T00:00:00","ID":"CVE-2018-5470","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Philips IntelliSpace Portal","version":{"version_data":[{"version_value":"8.0.x"},{"version_value":"7.0.x"}]}}]},"vendor_name":"Philips"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an unquoted search path or element vulnerability that has been identified, which may allow an authorized local user to execute arbitrary code and escalate their level of privileges."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"UNQUOTED SEARCH PATH OR ELEMENT CWE-428"}]}]},"references":{"reference_data":[{"name":"https://www.usa.philips.com/healthcare/about/customer-support/product-security","refsource":"CONFIRM","url":"https://www.usa.philips.com/healthcare/about/customer-support/product-security"},{"name":"103182","refsource":"BID","url":"http://www.securityfocus.com/bid/103182"},{"name":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02","refsource":"MISC","url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.usa.philips.com/healthcare/about/customer-support/product-security","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/103182","name":"103182","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T05:33:44.334Z"}}]}}}