CVE-2019-13546 Security feature bypass in IntelliSpace Perinatal
Attackers with physical or remote access can bypass application containment to access unauthorized Windows resources and potentially escalate privileges.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-13546?
CVE-2019-13546 is a medium-severity vulnerability in IntelliSpace Perinatal, published on 25 Oct 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In IntelliSpace Perinatal, Versions K and prior, a vulnerability within the IntelliSpace Perinatal application environment could enable an unauthorized attacker with physical access to a locked application screen, or an authorized remote desktop session host application user to break-out from the containment of the application and access unauthorized resources from the Windows operating system as the limited-access Windows user. Due to potential Windows vulnerabilities, it may be possible for additional attack methods to be used to escalate privileges on the operating system.
Weakness: CWE-668
Which versions are affected by CVE-2019-13546?
It affects 1 product.
Products include Philips Intellispace Perinatal.
How do I fix CVE-2019-13546?
No fix has been published for CVE-2019-13546 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-13546 being exploited?
There is no known exploitation of CVE-2019-13546 in the wild and no public exploit code.
Sources
Also known as GHSA-6m7f-7867-px97.