Philips records

115 published records for vendor philips.

Researcher profile

Entered KEV: 2 · 1.7%
Weaponized: 2 · 1.7%
Pre-auth RCE: 16
With a fix record: 1.7%
Median publish → KEV: 1680 days

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

115 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
93Now	CVE-2017-0143Weaponized	The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold anmicrosoft · server message block RCE	High8.8	KEV	93.3%	Mar 16, 2017
91Now	CVE-2017-0199Weaponized	Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windowsmicrosoft · office RCE	High7.8	KEV	99.5%	Apr 12, 2017
41Plan	CVE-2018-5474No exploit	Philips Intellispace Portal all versions 7.0.x and 8.0.x have an input validation vulnerability that could allow a remote attacker to executphilips · intellispace portal · CWE-20 pre-auth RCE	Critical9.8	—	6.1%	Mar 26, 2018
40Plan	CVE-2018-5472No exploit	Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker to philips · intellispace portal · CWE-264 pre-auth RCE	Critical9.8	—	4.5%	Mar 26, 2018
40Plan	CVE-2018-5468No exploit	Philips Intellispace Portal all versions 7.0.x and 8.0.x have a remote desktop access vulnerability that could allow an attacker to gain unaphilips · intellispace portal · CWE-264 pre-auth RCE	Critical9.8	—	4.5%	Mar 26, 2018
40Plan	CVE-2018-8850No exploit	Philips e-Alert Unit (non-medical device), Version R2.1 and prior.philips · e-alert firmware · CWE-20 pre-auth RCE	Critical9.8	—	3.8%	Sep 26, 2018
40Plan	CVE-2018-5451No exploit	In Philips Alice 6 System version R8.0.2 or prior, when an actor claims to have a given identity, the software does not prove or insufficienphilips · alice 6 firmware · CWE-287 pre-auth RCE Auth bypass	Critical9.8	—	2.6%	Mar 28, 2018
39Monitor	CVE-2015-2882No exploit	Philips In.Sight B120/37 has a password of b120root for the backdoor root account, a password of /ADMIN/ for the backdoor admin account, a pphilips · in.sight b120\\37 · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	1.6%	Apr 9, 2017
39Monitor	CVE-2018-8856No exploit	Philips e-Alert Unit (non-medical device), Version R2.1 and prior.philips · e-alert firmware · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	1.4%	Sep 26, 2018
39Monitor	CVE-2021-27501No exploit	Philips Vue PACS Improper Adherence to Coding Standardsphilips · myvue · CWE-710 Pre-auth	Critical9.8	—	0.9%	Apr 1, 2022
39Monitor	CVE-2021-27497No exploit	Philips Vue PACS Protection Mechanism Failurephilips · myvue · CWE-693 Pre-auth	Critical9.8	—	0.8%	Apr 1, 2022
39Monitor	CVE-2018-7498No exploit	In Philips Alice 6 System version R8.0.2 or prior, the lack of proper data encryption passes up the guarantees of confidentiality, integrityphilips · alice 6 firmware · CWE-311 Pre-auth	Critical9.8	—	0.6%	Mar 28, 2018
38Monitor	CVE-2013-2808No exploit	Heap-based buffer overflow in Xper in Philips Xper Information Management Physiomonitoring 5 components, Xper Information Management Vasculaphilips · xper information management physiomonitoring 5 · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	4.3%	Oct 5, 2013
37Monitor	CVE-2017-9656No exploit	The backend database of the Philips DoseWise Portal application versions 1.1.7.333 and 2.1.1.3069 uses hard-coded credentials for a databasephilips · dosewise · CWE-798 Hard-coded credentials	Critical9.1	—	2.3%	Apr 24, 2018
36Monitor	CVE-2018-8852No exploit	Philips e-Alert Unit (non-medical device), Version R2.1 and prior.philips · e-alert firmware · CWE-384 Pre-auth	High8.8	—	1.9%	Sep 26, 2018
35Monitor	CVE-2021-39376No exploit	Philips Healthcare Tasy Electronic Medical Record (EMR) 3.06 allows SQL injection via the CorCad_F2/executaConsultaEspecifico IE_CORPO_ASSISphilips · tasy electronic medical record · CWE-89 SQL injection	High8.8	—	1.3%	Aug 24, 2021
35Monitor	CVE-2021-39375No exploit	Philips Healthcare Tasy Electronic Medical Record (EMR) 3.06 allows SQL injection via the WAdvancedFilter/getDimensionItemsByCode FilterValuphilips · tasy electronic medical record · CWE-89 SQL injection	High8.8	—	1.3%	Aug 24, 2021
35Monitor	CVE-2017-9654No exploit	The Philips DoseWise Portal web-based application versions 1.1.7.333 and 2.1.1.3069 stores login credentials in clear text within backend syphilips · dosewise · CWE-312	High8.8	—	1.0%	Apr 24, 2018
35Monitor	CVE-2018-8844No exploit	Philips e-Alert Unit (non-medical device), Version R2.1 and prior.philips · e-alert firmware · CWE-352 Pre-auth CSRF	High8.8	—	0.9%	Sep 26, 2018
35Monitor	CVE-2018-17906No exploit	Philips iSite and IntelliSpace PACS, iSite PACS, all versions, and IntelliSpace PACS, all versions.philips · intellispace pacs · CWE-521 Pre-auth Hard-coded credentials	High8.8	—	0.8%	Nov 19, 2018
35Monitor	CVE-2018-8842No exploit	Philips e-Alert Unit (non-medical device), Version R2.1 and prior.philips · e-alert firmware · CWE-319 Pre-auth Weak crypto	High8.8	—	0.6%	Sep 26, 2018
35Monitor	CVE-2020-16222No exploit	Philips Patient Monitoring Devices Improper Authenticationphilips · patient information center ix · CWE-287 Pre-auth Auth bypass	High8.8	—	0.5%	Sep 11, 2020
35Monitor	CVE-2026-3556No exploit	Philips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerabilityphilips · hue bridge v2 firmware · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.5%	Mar 16, 2026
35Monitor	CVE-2026-3560No exploit	Philips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerabilityphilips · hue bridge v2 firmware · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.5%	Mar 16, 2026
35Monitor	CVE-2021-33017No exploit	Philips IntelliBridge EC 40 and EC 80 Hub Authentication Bypass Using an Alternate Path or Channelphilips · intellibridge ec40 firmware · CWE-288 Pre-auth Auth bypass	High8.8	—	0.5%	Dec 27, 2021

CVE-2017-0143
93Now
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an
HighCVSS 8.8KEVWeaponizedEPSS 93%
- RCE
microsoft · server message blockMar 16, 2017
CVE-2017-0199
91Now
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows
HighCVSS 7.8KEVWeaponizedEPSS 99%
- RCE
microsoft · officeApr 12, 2017
CVE-2018-5474
41Plan
Philips Intellispace Portal all versions 7.0.x and 8.0.x have an input validation vulnerability that could allow a remote attacker to execut
CriticalCVSS 9.8No exploitEPSS 6%
- pre-auth RCE
philips · intellispace portalMar 26, 2018
CVE-2018-5472
40Plan
Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker to
CriticalCVSS 9.8No exploitEPSS 5%
- pre-auth RCE
philips · intellispace portalMar 26, 2018
CVE-2018-5468
40Plan
Philips Intellispace Portal all versions 7.0.x and 8.0.x have a remote desktop access vulnerability that could allow an attacker to gain una
CriticalCVSS 9.8No exploitEPSS 5%
- pre-auth RCE
philips · intellispace portalMar 26, 2018
CVE-2018-8850
40Plan
Philips e-Alert Unit (non-medical device), Version R2.1 and prior.
CriticalCVSS 9.8No exploitEPSS 4%
- pre-auth RCE
philips · e-alert firmwareSep 26, 2018
CVE-2018-5451
40Plan
In Philips Alice 6 System version R8.0.2 or prior, when an actor claims to have a given identity, the software does not prove or insufficien
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
- Auth bypass
philips · alice 6 firmwareMar 28, 2018
CVE-2015-2882
39Monitor
Philips In.Sight B120/37 has a password of b120root for the backdoor root account, a password of /ADMIN/ for the backdoor admin account, a p
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Hard-coded credentials
philips · in.sight b120\\37Apr 9, 2017
CVE-2018-8856
39Monitor
Philips e-Alert Unit (non-medical device), Version R2.1 and prior.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Hard-coded credentials
philips · e-alert firmwareSep 26, 2018
CVE-2021-27501
39Monitor
Philips Vue PACS Improper Adherence to Coding Standards
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
philips · myvueApr 1, 2022
CVE-2021-27497
39Monitor
Philips Vue PACS Protection Mechanism Failure
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
philips · myvueApr 1, 2022
CVE-2018-7498
39Monitor
In Philips Alice 6 System version R8.0.2 or prior, the lack of proper data encryption passes up the guarantees of confidentiality, integrity
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
philips · alice 6 firmwareMar 28, 2018
CVE-2013-2808
38Monitor
Heap-based buffer overflow in Xper in Philips Xper Information Management Physiomonitoring 5 components, Xper Information Management Vascula
CriticalCVSS 9.3No exploitEPSS 4%
- pre-auth RCE
- Memory safety
philips · xper information management physiomonitoring 5Oct 5, 2013
CVE-2017-9656
37Monitor
The backend database of the Philips DoseWise Portal application versions 1.1.7.333 and 2.1.1.3069 uses hard-coded credentials for a database
CriticalCVSS 9.1No exploitEPSS 2%
- Hard-coded credentials
philips · dosewiseApr 24, 2018
CVE-2018-8852
36Monitor
Philips e-Alert Unit (non-medical device), Version R2.1 and prior.
HighCVSS 8.8No exploitEPSS 2%
- Pre-auth
philips · e-alert firmwareSep 26, 2018
CVE-2021-39376
35Monitor
Philips Healthcare Tasy Electronic Medical Record (EMR) 3.06 allows SQL injection via the CorCad_F2/executaConsultaEspecifico IE_CORPO_ASSIS
HighCVSS 8.8No exploitEPSS 1%
- SQL injection
philips · tasy electronic medical recordAug 24, 2021
CVE-2021-39375
35Monitor
Philips Healthcare Tasy Electronic Medical Record (EMR) 3.06 allows SQL injection via the WAdvancedFilter/getDimensionItemsByCode FilterValu
HighCVSS 8.8No exploitEPSS 1%
- SQL injection
philips · tasy electronic medical recordAug 24, 2021
CVE-2017-9654
35Monitor
The Philips DoseWise Portal web-based application versions 1.1.7.333 and 2.1.1.3069 stores login credentials in clear text within backend sy
HighCVSS 8.8No exploitEPSS 1%
philips · dosewiseApr 24, 2018
CVE-2018-8844
35Monitor
Philips e-Alert Unit (non-medical device), Version R2.1 and prior.
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- CSRF
philips · e-alert firmwareSep 26, 2018
CVE-2018-17906
35Monitor
Philips iSite and IntelliSpace PACS, iSite PACS, all versions, and IntelliSpace PACS, all versions.
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- Hard-coded credentials
philips · intellispace pacsNov 19, 2018
CVE-2018-8842
35Monitor
Philips e-Alert Unit (non-medical device), Version R2.1 and prior.
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- Weak crypto
philips · e-alert firmwareSep 26, 2018
CVE-2020-16222
35Monitor
Philips Patient Monitoring Devices Improper Authentication
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
philips · patient information center ixSep 11, 2020
CVE-2026-3556
35Monitor
Philips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
philips · hue bridge v2 firmwareMar 16, 2026
CVE-2026-3560
35Monitor
Philips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
philips · hue bridge v2 firmwareMar 16, 2026
CVE-2021-33017
35Monitor
Philips IntelliBridge EC 40 and EC 80 Hub Authentication Bypass Using an Alternate Path or Channel
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
philips · intellibridge ec40 firmwareDec 27, 2021