Vulnerabilities within the Philips Brilliance CT kiosk environment (Brilliance 64...

8.7 CVSS

Vulnerability Description

Vulnerabilities within the Philips Brilliance CT kiosk environment (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior) could enable a limited-access kiosk user or an unauthorized attacker to break-out from the containment of the kiosk environment, attain elevated privileges from the underlying Windows OS, and access unauthorized resources from the operating system.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-8861

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Philips

View All →

CVE-2025-3426

Use of default hardcoded credentials

High 7.2

CVE-2025-3425

Unauthenticated Remote Code Execution via .NET Deserialization

High 7.3

CVE-2025-3424

3.2.1 Arbitrary File Read in insecure .NET Remoting TCP Channel

High 7.7

CVE-2025-2230

Philips Intellispace Cardiovascular (ISCV) Improper Authentication

High 8.5

CVE-2025-2229

Philips Intellispace Cardiovascular (ISCV) Use of Weak Credentials

High 8.5

Affected Vendor

Philips

View all reports →

Affected Software

Brilliance CT Scanners

Vulnerable Versions:

Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior.