What’s Vulnerable › Vulnerabilities

CVE-2018-14801

• Severity: medium (CVSS 6.2 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-08-22 · updated 2026-06-17
• Weakness: CWE-798

Description

In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, an attacker with both the superuser password and physical access can enter the superuser password that can be used to access and modify all settings on the device, as well as allow the user to reset existing passwords.

Affected products

• Philips Pagewriter Tc10 Firmware: all versions
• Philips Pagewriter Tc20 Firmware: all versions
• Philips Pagewriter Tc30 Firmware: all versions
• Philips Pagewriter Tc50 Firmware: all versions
• Philips Pagewriter Tc70 Firmware: all versions

References

• http://www.securityfocus.com/bid/105103
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-228-01
• https://www.usa.philips.com/healthcare/about/customer-support/product-security
• http://www.securityfocus.com/bid/105103
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-228-01
• https://www.usa.philips.com/healthcare/about/customer-support/product-security

Get alerted when CVE-2018-14801 or the next vulnerability affects your stack