CVE-2018-14787
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-14787
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 2.x or prior and Xcelera Version 4.1 or prior), an attacker with escalated privileges could access folders which contain executables where authenticated users have write permissions, and could then execute arbitrary code with local administrative permissions.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
特权管理不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Philips IntelliSpace Cardiovascular和Xcelera 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Philips IntelliSpace Cardiovascular（ISCV）和Xcelera都是荷兰飞利浦（Philips）公司的产品。Philips ISCV是一套心脏影像信息管理系统。Xcelera是它的前身。 Philips ISCV 2.x及之前版本和Xcelera 4.1及之前版本中存在安全漏洞，该漏洞源于程序没有进行正确的权限管理。攻击者可利用该漏洞访问含有可执行文件的文件夹并以本地管理权限执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Philips | IntelliSpace Cardiovascular (ISCV) products | IntelliSpace Cardiovascular, Version 3.1 or prior | - |
II. Public POCs for CVE-2018-14787
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-14787
Please Login to view more intelligence information
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-226-01x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2018-14787
Same Patch Batch · Philips · 2018-08-22 · 4 CVEs total
| CVE-2018-14789 | Philips IntelliSpace Cardiovascular和Xcelera 安全漏洞 | |
| CVE-2018-14799 | 多款Philips产品安全漏洞 | |
| CVE-2018-14801 | 多款Philips产品安全漏洞 |
IV. Related Vulnerabilities
Same vendor: Philips
- CVE-2026-3562
Philips Hue Bridge hk_hap Ed25519 Signature Verification Aut - CVE-2026-3561
Philips Hue Bridge hk_hap characteristics Heap-based Buffer - CVE-2026-3560
Philips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-base - CVE-2026-3559
Philips Hue Bridge HomeKit Accessory Protocol Static Nonce A - CVE-2026-3558
Philips Hue Bridge HomeKit Accessory Protocol Transient Pair
Same weakness: CWE-269
- CVE-2026-42562
Plainpad: Privilege Escalation via Writable Admin Field in P - CVE-2026-41163
bubblewrap vulnerable to privilege escalation in setuid mode - CVE-2026-44987
SysReptor: Privilege Escalation from User Admin to Superuser - CVE-2026-42185
People: Privilege Escalation via Missing Role Ceiling in Mai - CVE-2026-40001
Local privilege escalation vulnerability in ZTE PROCESS Guar
V. Comments for CVE-2018-14787
No comments yet