CVE-2017-9654

HIGH

Philips DoseWise Portal <2.1.1.3069 - Info Disclosure

Title source: llm

Description

The Philips DoseWise Portal web-based application versions 1.1.7.333 and 2.1.1.3069 stores login credentials in clear text within backend system files. CVSS v3 base score: 6.5, CVSS vector string: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

References (3)

Scores

CVSS v3 8.8
EPSS 0.0021
EPSS Percentile 43.7%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-522 CWE-312
Status published

Affected Products (2)

philips/dosewise
philips/dosewise

Timeline

Published Apr 24, 2018
Tracked Since Feb 18, 2026