{"id":"CVE-2018-5472","aliases":["EUVD-2018-17242","GHSA-5p2r-vgvp-m365"],"status":"published","title":"Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions...","description":"Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their level of privilege or execute arbitrary code.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.0451,"percentile":0.91573,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2018-03-26T14:00:00Z","modified":"2026-06-17T02:00:22Z","products":[{"vendor":"philips","product":"intellispace_portal"},{"vendor":"philips","product":"philips intellispace portal"}],"references":[{"url":"https://www.usa.philips.com/healthcare/about/customer-support/product-security","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/103182","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5472"},{"url":"https://github.com/advisories/GHSA-5p2r-vgvp-m365"}],"sources":{"cve":[{"id":"CVE-2018-5472","description":"Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their level of privilege or execute arbitrary code.","status":"published","published":"2018-03-26T14:00:00Z","modified":"2024-09-17T00:10:29.23Z","cwes":["CWE-264"],"updated_at":"2026-11-02T14:35:00.948726Z"}],"euvd":[{"id":"EUVD-2018-17242","description":"Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their level of privilege or execute arbitrary code.","status":"published","published":"2018-03-26T14:00:00Z","modified":"2024-09-17T00:10:29Z","updated_at":"2026-11-03T00:29:01.573177Z"}],"ghsa":[{"id":"GHSA-5p2r-vgvp-m365","title":"Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions...","description":"Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their level of privilege or execute arbitrary code.","status":"published","published":"2022-05-13T01:32:05Z","modified":"2023-02-01T05:08:10Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T14:50:41.695645Z"}],"nvd":[{"id":"CVE-2018-5472","description":"Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their level of privilege or execute arbitrary code.","status":"published","published":"2018-03-26T14:29:00.65Z","modified":"2026-06-17T02:00:22.627Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:04:24.700429Z"}]}}