What’s Vulnerable › Vulnerabilities

CVE-2019-18263

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-12-20 · updated 2026-06-17
• Weakness: CWE-326

Description

An issue was found in Philips Veradius Unity, Pulsera, and Endura Dual WAN Router, Veradius Unity (718132) with wireless option (shipped between 2016-August 2018), Veradius Unity (718132) with ViewForum option (shipped between 2016-August 2018), Pulsera (718095) and Endura (718075) with wireless option (shipped between 26-June-2017 through 07-August 2018), Pulsera (718095) and Endura (718075) with ViewForum option (shipped between 26-June-2017 through 07-August 2018). The router software uses an encryption scheme that is not strong enough for the level of protection required.

Affected products

• Philips Endura Firmware: all versions
• Philips Pulsera Firmware: all versions
• Philips Veradius Unity Firmware: all versions

References

• https://www.us-cert.gov/ics/advisories/icsma-19-353-01
• https://www.us-cert.gov/ics/advisories/icsma-19-353-01

Get alerted when CVE-2019-18263 or the next vulnerability affects your stack