← Vulnerability feed

Vulnerability record · CVE-2018-5474 · published 26 March 2018

CVE-2018-5474: Philips intellispace portal improper input validation vulnerability

Philips · Intellispace Portal

Philips Intellispace Portal all versions 7.0.x and 8.0.x have an input validation vulnerability that could allow a remote attacker to execute arbitrary code or cause the application to crash.

9.8 CVSS 3.0 Critical EPSS 6.1% · top 6.9% CWE-20 · Improper input validation
9.8CVSS 3.0 base score, v2 7.5
6.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

Philips Intellispace Portal all versions 7.0.x and 8.0.x have an input validation vulnerability that could allow a remote attacker to execute arbitrary code or cause the application to crash.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/bid/103182 Third Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 Third Party AdvisoryUS Government Resource
https://www.usa.philips.com/healthcare/about/customer-support/product-security Vendor Advisory
http://www.securityfocus.com/bid/103182 Third Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 Third Party AdvisoryUS Government Resource
https://www.usa.philips.com/healthcare/about/customer-support/product-security Vendor Advisory

Track CVE-2018-5474 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2017-0143Microsoft Windows SMBv1 Server Remote Code ExecutionThe SMBv1 server in multiple Microsoft Windows versions fails to properly handle crafted packets, allowing remote code execution. This is one of the …KEVEPSS 93%analysed7.8CVE-2017-0199Microsoft Office and WordPad remote code execution via crafted documentCVE-2017-0199 is a remote code execution flaw in Microsoft Office and WordPad that is triggered when a user opens a specially crafted document. The r…KEVEPSS 99%analysed9.8CVE-2018-5468Philips intellispace portal permissions and access controls vulnerabilityPhilips Intellispace Portal all versions 7.0.x and 8.0.x have a remote desktop access vulnerability that could allow an attacker to gain unauthorized…EPSS 4.5%9.8CVE-2018-5472Philips intellispace portal permissions and access controls vulnerabilityPhilips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker to gain unau…EPSS 4.5%8.1CVE-2018-5454Philips intellispace portal vulnerabilityPhilips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability where code debugging methods are enabled, which could allow an atta…EPSS 3.4%7.8CVE-2018-5470Philips intellispace portal unquoted search path vulnerabilityPhilips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an unquoted search path or element vulnerability that has been identified, which ma…EPSS 0.55%7.5CVE-2018-5458Philips intellispace portal broken cryptographic algorithm vulnerabilityPhilips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability using SSL legacy encryption that could allow an attacker to gain un…EPSS 1.2%7.5CVE-2018-5462Philips intellispace portal improper certificate validation vulnerabilityPhilips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an SSL incorrect hostname certificate vulnerability this could allow an attacker to…EPSS 1.9%

Source: NIST National Vulnerability Database (record CVE-2018-5474), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.