CVE-2018-5468 Auth bypass in Philips IntelliSpace Portal

Critical 9.8 Published 26 Mar 2018 Updated 16 Sep 2024

Attackers can bypass authentication to gain unauthorized access, escalate privileges, or execute arbitrary code on Philips IntelliSpace Portal.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-5468?

CVE-2018-5468 is a critical authentication bypass vulnerability in Philips IntelliSpace Portal, published on 26 Mar 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Philips Intellispace Portal all versions 7.0.x and 8.0.x have a remote desktop access vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their level of privilege or execute arbitrary code

Weakness: CWE-264

Which versions are affected by CVE-2018-5468?

It affects 1 product.

Products include Philips Intellispace Portal.

How do I fix CVE-2018-5468?

No fix has been published for CVE-2018-5468 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2018-5468 being exploited?

There is no known exploitation of CVE-2018-5468 in the wild and no public exploit code.

Sources

Also known as GHSA-34gh-2h52-xg3c.