Vulnerability record · CVE-2018-5470 · published 26 March 2018

CVE-2018-5470: Philips intellispace portal unquoted search path vulnerability

Philips · Intellispace Portal

Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an unquoted search path or element vulnerability that has been identified, which may allow an authorized local user to execute arbitrary code and escalate their level of privileges.

7.8 CVSS 3.0 High EPSS 0.55% · top 56.3% CWE-428 · Unquoted search pathCWE-426 · Untrusted search path

7.8CVSS 3.0 base score, v2 7.2

0.55%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

6References

17 Jun 2026Last modified by NVD

Description

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Intellispace Portal Philips

References

Link	Tags
http://www.securityfocus.com/bid/103182	Third Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02	Third Party AdvisoryUS Government Resource
https://www.usa.philips.com/healthcare/about/customer-support/product-security	Vendor Advisory
http://www.securityfocus.com/bid/103182	Third Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02	Third Party AdvisoryUS Government Resource
https://www.usa.philips.com/healthcare/about/customer-support/product-security	Vendor Advisory

Track CVE-2018-5470 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2017-0143Microsoft Windows SMBv1 Server Remote Code ExecutionThe SMBv1 server in multiple Microsoft Windows versions fails to properly handle crafted packets, allowing remote code execution. This is one of the …KEVEPSS 93%analysed17 Mar 2017 7.8CVE-2017-0199Microsoft Office and WordPad remote code execution via crafted documentCVE-2017-0199 is a remote code execution flaw in Microsoft Office and WordPad that is triggered when a user opens a specially crafted document. The r…KEVEPSS 99%analysed12 Apr 2017 9.8CVE-2018-5468Philips intellispace portal permissions and access controls vulnerabilityPhilips Intellispace Portal all versions 7.0.x and 8.0.x have a remote desktop access vulnerability that could allow an attacker to gain unauthorized…EPSS 4.5%26 Mar 2018 9.8CVE-2018-5472Philips intellispace portal permissions and access controls vulnerabilityPhilips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker to gain unau…EPSS 4.5%26 Mar 2018 9.8CVE-2018-5474Philips intellispace portal improper input validation vulnerabilityPhilips Intellispace Portal all versions 7.0.x and 8.0.x have an input validation vulnerability that could allow a remote attacker to execute arbitra…EPSS 6.1%26 Mar 2018 8.1CVE-2018-5454Philips intellispace portal vulnerabilityPhilips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability where code debugging methods are enabled, which could allow an atta…EPSS 3.4%26 Mar 2018 7.5CVE-2018-5458Philips intellispace portal broken cryptographic algorithm vulnerabilityPhilips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability using SSL legacy encryption that could allow an attacker to gain un…EPSS 1.2%26 Mar 2018 7.5CVE-2018-5462Philips intellispace portal improper certificate validation vulnerabilityPhilips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an SSL incorrect hostname certificate vulnerability this could allow an attacker to…EPSS 1.9%26 Mar 2018

Source: NIST National Vulnerability Database (record CVE-2018-5470), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.