{"id":"CVE-2018-8854","aliases":["EUVD-2018-20462","GHSA-rr2x-3jrw-67xx"],"status":"published","title":"Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not properly...","description":"Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not properly restrict the size or amount of resources requested or influenced by an actor, which can be used to consume more resources than intended.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02523,"percentile":0.84972,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-400"],"published":"2018-09-26T19:00:00Z","modified":"2026-06-17T02:05:31Z","products":[{"vendor":"philips","product":"e-alert unit (non-medical device)"},{"vendor":"philips","product":"e-alert_firmware"}],"references":[{"url":"https://www.usa.philips.com/healthcare/about/customer-support/product-security","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/105194","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-242-01","tags":["x_refsource_MISC","x_transferred","Mitigation","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8854"},{"url":"https://github.com/advisories/GHSA-rr2x-3jrw-67xx"}],"sources":{"cve":[{"id":"CVE-2018-8854","description":"Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not properly restrict the size or amount of resources requested or influenced by an actor, which can be used to consume more resources than intended.","status":"published","published":"2018-09-26T19:00:00Z","modified":"2024-09-16T23:46:57.353Z","cwes":["CWE-400"],"updated_at":"2026-11-02T14:35:04.540365Z"}],"euvd":[{"id":"EUVD-2018-20462","description":"Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not properly restrict the size or amount of resources requested or influenced by an actor, which can be used to consume more resources than intended.","status":"published","published":"2018-09-26T19:00:00Z","modified":"2024-09-16T23:46:57Z","updated_at":"2026-11-03T00:29:04.923307Z"}],"ghsa":[{"id":"GHSA-rr2x-3jrw-67xx","title":"Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not properly...","description":"Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not properly restrict the size or amount of resources requested or influenced by an actor, which can be used to consume more resources than intended.","status":"published","published":"2022-05-13T01:31:46Z","modified":"2023-02-01T05:08:23Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:50:45.067904Z"}],"nvd":[{"id":"CVE-2018-8854","description":"Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not properly restrict the size or amount of resources requested or influenced by an actor, which can be used to consume more resources than intended.","status":"published","published":"2018-09-26T19:29:03.003Z","modified":"2026-06-17T02:05:31.12Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:04:42.52179Z"}]}}