Philips vulnerabilities2 known to be exploited.
Philips has 110 published vulnerabilities across 214 products in our catalogue. 2 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Vue Pacs, with 12. If you run Philips software, patch the exploited flaws first.
The most recent Philips flaw added to the known-exploited list is CVE-2017-0143, on 3 November 2021. We keep watching the known-exploited list.
Which Philips products have the most vulnerabilities?
Vue Pacs leads with 12 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Philips vulnerabilities are being exploited?
2 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 8.8Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability
Microsoft Windows Server Message Block 1.0 (SMBv1) contains an unspecified vulnerability that allows for remote code execution.
- 7.8Microsoft Office and WordPad Remote Code Execution Vulnerability
Microsoft Office and WordPad contain an unspecified vulnerability due to the way the applications parse specially crafted files.
Which Philips flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to...
- 6.1%CVE-2018-5474Critical
Philips Intellispace Portal all versions 7.0.x and 8.0.x have an input validation vulnerability that could allow a remote attacker to execute arbitrary code or cause the application to crash.
- 4.5%CVE-2018-5472Critical
Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their level of privilege...
- 4.5%CVE-2018-5468Critical
Philips Intellispace Portal all versions 7.0.x and 8.0.x have a remote desktop access vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their level of privilege or...
- 4.3%CVE-2013-2808Critical
Heap-based buffer overflow in Xper in Philips Xper Information Management Physiomonitoring 5 components, Xper Information Management Vascular Monitoring 5 components, and Xper Information Management servers and...
- 3.8%CVE-2018-8850Critical
Philips e-Alert Unit (non-medical device), Version R2.1 and prior.
- 3.4%CVE-2018-5454High
Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability where code debugging methods are enabled, which could allow an attacker to remotely execute arbitrary code during runtime.
- 2.6%CVE-2018-5451Critical
In Philips Alice 6 System version R8.0.2 or prior, when an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.
- 2.5%CVE-2018-8854High
Philips e-Alert Unit (non-medical device), Version R2.1 and prior.
All Philips products we track.
75 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Vue Pacsvue_pacs12 vulnerabilities1 version
- Intellispace Portalintellispace_portal11 vulnerabilities3 versions
- Patient Information Center Ixpatient_information_center_ix11 vulnerabilities3 versions
- E-Alert Firmwaree-alert_firmware10 vulnerabilities2 versions
- Clinical Collaboration Platformclinical_collaboration_platform8 vulnerabilities3 versions
- Myvuemyvue8 vulnerabilities1 version
- Speechspeech8 vulnerabilities1 version
- Vue Motionvue_motion8 vulnerabilities1 version
- Intellivue X2intellivue_x25 vulnerabilities1 version
- Intellivue X3intellivue_x35 vulnerabilities1 version
- Intellispace Cardiovascularintellispace_cardiovascular4 vulnerabilities2 versions
- Performancebridge Focal Pointperformancebridge_focal_point4 vulnerabilities1 version
- Brilliance Ict Firmwarebrilliance_ict_firmware3 vulnerabilities1 version
- Brilliance Ict Sp Firmwarebrilliance_ict_sp_firmware3 vulnerabilities1 version
- Intellibridge Ec40 Firmwareintellibridge_ec40_firmware3 vulnerabilities1 version
- Intellibridge Ec80 Firmwareintellibridge_ec80_firmware3 vulnerabilities1 version
- Mri 1.5t Firmwaremri_1.5t_firmware3 vulnerabilities1 version
- Mri 3t Firmwaremri_3t_firmware3 vulnerabilities1 version
- Suresigns Vs4 Firmwaresuresigns_vs4_firmware3 vulnerabilities1 version
- Xceleraxcelera3 vulnerabilities2 versions
- 8652408652402 vulnerabilities1 version
- 8652418652412 vulnerabilities1 version
- 8652428652422 vulnerabilities1 version
- Alice 6 Firmwarealice_6_firmware2 vulnerabilities1 version
This directory lists the 75 Philips products with at least one tracked version, of 214 in our catalogue.
Running Philips? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Microsoft Windows Server Message Block 1.0 (SMBv1) contains an unspecified vulnerability that allows for remote code execution.
- Matched to
- Philips on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 110 published vulnerabilities across 214 products and 170 versions from Philips. The most recent Philips flaw added to the known-exploited list is CVE-2017-0143, on 3 November 2021.
2 Philips vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2017-0143 and CVE-2017-0199. The full list is on this page.
Vue Pacs, with 12 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Philips products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.