What’s Vulnerable › Vulnerabilities

CVE-2018-14799

• Severity: low (CVSS 3.7 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-08-22 · updated 2026-06-17
• Weakness: CWE-20

Description

In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, the PageWriter device does not sanitize data entered by user. This can lead to buffer overflow or format string vulnerabilities.

Affected products

• Philips Pagewriter Tc10 Firmware: all versions
• Philips Pagewriter Tc20 Firmware: all versions
• Philips Pagewriter Tc30 Firmware: all versions
• Philips Pagewriter Tc50 Firmware: all versions
• Philips Pagewriter Tc70 Firmware: all versions

References

• http://www.securityfocus.com/bid/105103
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-228-01
• https://www.usa.philips.com/healthcare/about/customer-support/product-security
• http://www.securityfocus.com/bid/105103
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-228-01
• https://www.usa.philips.com/healthcare/about/customer-support/product-security

Get alerted when CVE-2018-14799 or the next vulnerability affects your stack