Philips Brilliance CT software (Brilliance 64 version 2.6.2 and prior,...

7.8 CVSS

Vulnerability Description

Philips Brilliance CT software (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior) contains fixed credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. An attacker could compromise these credentials and gain access to the system.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-8857

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Philips

View All →

CVE-2025-3426

Use of default hardcoded credentials

High 7.2

CVE-2025-3425

Unauthenticated Remote Code Execution via .NET Deserialization

High 7.3

CVE-2025-3424

3.2.1 Arbitrary File Read in insecure .NET Remoting TCP Channel

High 7.7

CVE-2025-2230

Philips Intellispace Cardiovascular (ISCV) Improper Authentication

High 8.5

CVE-2025-2229

Philips Intellispace Cardiovascular (ISCV) Use of Weak Credentials

High 8.5

Affected Vendor

Philips

View all reports →

Affected Software

Brilliance CT Scanners

Vulnerable Versions:

Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior.