N/A

Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. The Philips e-Alert communication channel is not encrypted which could therefore lead to disclosure of personal contact information and application login credentials from within the same subnet.

N/A

敏感数据的明文传输

Philips e-Alert 安全漏洞

Philips e-Alert是荷兰飞利浦（Philips）公司的一款针对MRI系统的电子警报解决方案，它主要用于监控MRI系统性能并发出警报。 Philips e-Alert R2.1及之前版本中存在安全漏洞，该漏洞源于在通信通道中程序以明文的形式传递敏感或与安全有关的重要数据。远程攻击者可利用该漏洞泄露个人的联系信息以及登录凭证。

N/A

N/A