| Title | 複数の Philips 製品におけるバッファエラーの脆弱性 |
|---|---|
| Summary | 複数の Philips 製品には、バッファエラーの脆弱性が存在します。 |
| Possible impacts | 情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。 |
| Solution | ベンダ情報および参考情報を参照して適切な対策を実施してください。 |
| Publication Date | June 5, 2018, midnight |
| Registration Date | Aug. 15, 2018, 4:46 p.m. |
| Last Update | Aug. 15, 2018, 4:46 p.m. |
| CVSS3.0 : 重要 | |
| Score | 8.2 |
|---|---|
| Vector | CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:H |
| CVSS2.0 : 警告 | |
| Score | 5.4 |
|---|---|
| Vector | AV:A/AC:M/Au:N/C:P/I:P/A:P |
| フィリップス |
| Avalon Fetal/Maternal Monitors FM20 ファームウェア |
| Avalon Fetal/Maternal Monitors FM30 ファームウェア |
| Avalon Fetal/Maternal Monitors FM40 ファームウェア |
| Avalon Fetal/Maternal Monitors FM50 ファームウェア |
| IntelliVue Patient Monitors MP2 ファームウェア |
| IntelliVue Patient Monitors MP30 ファームウェア |
| IntelliVue Patient Monitors MP50 ファームウェア |
| IntelliVue Patient Monitors MP70 ファームウェア |
| IntelliVue Patient Monitors MX100 ファームウェア |
| IntelliVue Patient Monitors MX400 ファームウェア |
| IntelliVue Patient Monitors MX450 ファームウェア |
| IntelliVue Patient Monitors MX500 ファームウェア |
| IntelliVue Patient Monitors MX550 ファームウェア |
| IntelliVue Patient Monitors MX700 ファームウェア |
| IntelliVue Patient Monitors MX800 ファームウェア |
| IntelliVue Patient Monitors NP90 ファームウェア |
| IntelliVue Patient Monitors X2 ファームウェア |
| IntelliVue Patient Monitors X3 ファームウェア |
| No | Changed Details | Date of change |
|---|---|---|
| 1 | [2018年08月15日] 掲載 |
Aug. 15, 2018, 4:46 p.m. |
| Summary | IntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M, IntelliVue Patient Monitors MX (MX400-550) Rev J-M and (X3/MX100 for Rev M only), and Avalon Fetal/Maternal Monitors FM20/FM30/FM40/FM50 with software Revisions F.0, G.0 and J.3 have a vulnerability that exposes an "echo" service, in which an attacker-sent buffer to an attacker-chosen device address within the same subnet is copied to the stack with no boundary checks, hence resulting in stack overflow. |
|---|---|
| Publication Date | June 6, 2018, 5:29 a.m. |
| Registration Date | March 1, 2021, 6:42 p.m. |
| Last Update | Nov. 21, 2024, 12:41 p.m. |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:o:philips:intellivue_mp2_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:philips:intellivue_mp2:-:*:*:*:*:*:*:* | ||||
| Configuration2 | or higher | or less | more than | less than | |
| cpe:2.3:o:philips:intellivue_x2_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:philips:intellivue_x2:-:*:*:*:*:*:*:* | ||||
| Configuration3 | or higher | or less | more than | less than | |
| cpe:2.3:o:philips:intellivue_mp30_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:philips:intellivue_mp30:-:*:*:*:*:*:*:* | ||||
| Configuration4 | or higher | or less | more than | less than | |
| cpe:2.3:o:philips:intellivue_mp50_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:philips:intellivue_mp50:-:*:*:*:*:*:*:* | ||||
| Configuration5 | or higher | or less | more than | less than | |
| cpe:2.3:o:philips:intellivue_mp70_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:philips:intellivue_mp70:-:*:*:*:*:*:*:* | ||||
| Configuration6 | or higher | or less | more than | less than | |
| cpe:2.3:o:philips:intellivue_np90_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:philips:intellivue_np90:-:*:*:*:*:*:*:* | ||||
| Configuration7 | or higher | or less | more than | less than | |
| cpe:2.3:o:philips:intellivue_mx700_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:philips:intellivue_mx700:-:*:*:*:*:*:*:* | ||||
| Configuration8 | or higher | or less | more than | less than | |
| cpe:2.3:o:philips:intellivue_mx800_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:philips:intellivue_mx800:-:*:*:*:*:*:*:* | ||||
| Configuration9 | or higher | or less | more than | less than | |
| cpe:2.3:o:philips:intellivue_mx400_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:philips:intellivue_mx400:-:*:*:*:*:*:*:* | ||||
| Configuration10 | or higher | or less | more than | less than | |
| cpe:2.3:o:philips:intellivue_mx450_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:philips:intellivue_mx450:-:*:*:*:*:*:*:* | ||||
| Configuration11 | or higher | or less | more than | less than | |
| cpe:2.3:o:philips:intellivue_mx500_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:philips:intellivue_mx500:-:*:*:*:*:*:*:* | ||||
| Configuration12 | or higher | or less | more than | less than | |
| cpe:2.3:o:philips:intellivue_mx550_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:philips:intellivue_mx550:-:*:*:*:*:*:*:* | ||||
| Configuration13 | or higher | or less | more than | less than | |
| cpe:2.3:o:philips:intellivue_x3_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:philips:intellivue_x3:-:*:*:*:*:*:*:* | ||||
| Configuration14 | or higher | or less | more than | less than | |
| cpe:2.3:o:philips:intellivue_mx100_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:philips:intellivue_mx100:-:*:*:*:*:*:*:* | ||||
| Configuration15 | or higher | or less | more than | less than | |
| cpe:2.3:o:philips:avalon_fetal\/maternal_monitors_fm20_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:philips:avalon_fetal\/maternal_monitors_fm20:-:*:*:*:*:*:*:* | ||||
| Configuration16 | or higher | or less | more than | less than | |
| cpe:2.3:o:philips:avalon_fetal\/maternal_monitors_fm30_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:philips:avalon_fetal\/maternal_monitors_fm30:-:*:*:*:*:*:*:* | ||||
| Configuration17 | or higher | or less | more than | less than | |
| cpe:2.3:o:philips:avalon_fetal\/maternal_monitors_fm40_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:philips:avalon_fetal\/maternal_monitors_fm40:-:*:*:*:*:*:*:* | ||||
| Configuration18 | or higher | or less | more than | less than | |
| cpe:2.3:o:philips:avalon_fetal\/maternal_monitors_fm50_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:philips:avalon_fetal\/maternal_monitors_fm50:-:*:*:*:*:*:*:* | ||||