CVE-2018-8848 - AskarLabs CVE Database

CVE-2018-8848

Vendor Philips

Product e-Alert Unit (non-medical device)

Weakness CWE-276

Published September 26, 2018

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software, upon installation, sets incorrect permissions for an object that exposes it to an unintended actor.

Key dates

02Disclosure timeline

September 26, 2018 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-8848 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/276.html

Related vulnerabilities

04Related CVE

CVE-2026-49157 Apache ActiveMQ: Authenticated low-privilege Web users retain Jolokia broker-management capability by default CVE-2025-23386 gerbera: Privilege escalation from user gerbera to root because of insecure %post script CVE-2024-43166 CVE-2025-8485 CVE-2024-28862 ROTP 6.2.2 and 6.2.1 has 0666 permissions for the .rb files.