CVE-2018-8842 - CVE House
Back to Database
Status published High CVE-2018-8842

Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The...

Vulnerability Description

Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. The Philips e-Alert communication channel is not encrypted which could therefore lead to disclosure of personal contact information and application login credentials from within the same subnet.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-8842

Credits & Attribution

No credits recorded in the NVD database.

References

More from Philips

View All →
CVE-2025-3426
Use of default hardcoded credentials
High 7.2
CVE-2025-3425
Unauthenticated Remote Code Execution via .NET Deserialization
High 7.3
CVE-2025-3424
3.2.1 Arbitrary File Read in insecure .NET Remoting TCP Channel
High 7.7
CVE-2025-2230
Philips Intellispace Cardiovascular (ISCV) Improper Authentication
High 8.5
CVE-2025-2229
Philips Intellispace Cardiovascular (ISCV) Use of Weak Credentials
High 8.5

Affected Vendor

Affected Software

e-Alert Unit (non-medical device)
Vulnerable Versions:
R2.1 and prior

Timeline

Official Publish: September 26th, 2018
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-319

MITRE ATT&CK TTPs

T1040 Network Sniffing
Collection
T1557 Adversary-in-the-Middle
Credential Access
T1552 Unsecured Credentials
Credential Access
T1078 Valid Accounts
Persistence
T1071 Application Layer Protocol
Command and Control