Strix
26.1K

CVE-2018-10597

HIGHCVSS 8.3/10EPSS 0.39%

Last modified

CVE-2018-10597 is a high-severity vulnerability rated 8.3/10 on the CVSS scale. IntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M, IntelliVue Patient Monitors MX (MX400-550) Rev J-M and (X3/MX100 for Rev M only), and Avalon Fetal/Maternal Monitors FM20/FM30/FM40/FM50 with software Revisions F.0, G.0 and J.3 have a vulnerability that allows an unauthenticated attacker to access memory ("write-what-where") from an attacker-chosen device address within the same subnet.. EPSS estimates a 0.39% chance of exploitation in the next 30 days.

Description

IntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M, IntelliVue Patient Monitors MX (MX400-550) Rev J-M and (X3/MX100 for Rev M only), and Avalon Fetal/Maternal Monitors FM20/FM30/FM40/FM50 with software Revisions F.0, G.0 and J.3 have a vulnerability that allows an unauthenticated attacker to access memory ("write-what-where") from an attacker-chosen device address within the same subnet.

Metrics

CVSS 3.1
8.3/10

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS Probability
0.39%

31.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
PhilipsIntellivue Mp2 FirmwareAll versions
PhilipsIntellivue X2 FirmwareAll versions
PhilipsIntellivue Mp30 FirmwareAll versions
PhilipsIntellivue Mp50 FirmwareAll versions
PhilipsIntellivue Mp70 FirmwareAll versions
PhilipsIntellivue Np90 FirmwareAll versions
PhilipsIntellivue Mx700 FirmwareAll versions
PhilipsIntellivue Mx800 FirmwareAll versions
PhilipsIntellivue Mx400 FirmwareAll versions
PhilipsIntellivue Mx450 FirmwareAll versions
PhilipsIntellivue Mx500 FirmwareAll versions
PhilipsIntellivue Mx550 FirmwareAll versions
PhilipsIntellivue X3 FirmwareAll versions
PhilipsIntellivue Mx100 FirmwareAll versions
PhilipsAvalon Fetal\/Maternal Monitors Fm20 FirmwareAll versions
PhilipsAvalon Fetal\/Maternal Monitors Fm30 FirmwareAll versions
PhilipsAvalon Fetal\/Maternal Monitors Fm40 FirmwareAll versions
PhilipsAvalon Fetal\/Maternal Monitors Fm50 FirmwareAll versions

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2018-10597?
IntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M, IntelliVue Patient Monitors MX (MX400-550) Rev J-M and (X3/MX100 for Rev M only), and Avalon Fetal/Maternal Monitors FM20/FM30/FM40/FM50 with software Revisions F.0, G.0 and J.3 have a vulnerability that allows an unauthenticated attacker to access memory ("write-what-where") from an attacker-chosen device address within the same subnet.
How severe is CVE-2018-10597?
CVE-2018-10597 has a CVSS score of 8.3/10 (HIGH severity). The EPSS model estimates a 0.39% probability of exploitation in the next 30 days.
How do I fix CVE-2018-10597?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-10597?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST