vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2018-10599

N/A
Published: June 5, 2018 at 08:00 PM UTC
Updated: June 17, 2026 at 01:34 AM UTC
38 products affected across 2 vendorsIntellivue MX700 FirmwareIntellivue MX550 FirmwareIntellivue MX400 Firmware

Using IntelliVue Patient Monitors, Avalon Fetal/Maternal Monitors by ICS-CERT?

Get instant alerts when new vulnerabilities affect IntelliVue Patient Monitors, Avalon Fetal/Maternal Monitors - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.4%

Description

IntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M, IntelliVue Patient Monitors MX (MX400-550) Rev J-M and (X3/MX100 for Rev M only), and Avalon Fetal/Maternal Monitors FM20/FM30/FM40/FM50 with software Revisions F.0, G.0 and J.3 have a vulnerability that allows an unauthenticated attacker to read memory from an attacker-chosen device address within the same subnet.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Avalon Fetal /maternal Monitors FM20 Firmware· Philips
95%
All versions
philips-avalon-fetal-maternal-monitors-fm20 (same device)
Avalon Fetal /maternal Monitors FM30 Firmware· Philips
95%
All versions
philips-avalon-fetal-maternal-monitors-fm30 (same device)
Avalon Fetal /maternal Monitors FM40 Firmware· Philips
95%
All versions
philips-avalon-fetal-maternal-monitors-fm40 (same device)
Avalon Fetal /maternal Monitors FM50 Firmware· Philips
95%
All versions
philips-avalon-fetal-maternal-monitors-fm50 (same device)
Intellivue MP2 Firmware· Philips
95%
All versions
philips-intellivue-mp2 (same device)
Intellivue MP30 Firmware· Philips
95%
All versions
philips-intellivue-mp30 (same device)
Intellivue MP50 Firmware· Philips
95%
All versions
philips-intellivue-mp50 (same device)
Intellivue MP70 Firmware· Philips
95%
All versions
philips-intellivue-mp70 (same device)
Intellivue MX100 Firmware· Philips
95%
All versions
philips-intellivue-mx100 (same device)
Intellivue MX400 Firmware· Philips
95%
All versions
philips-intellivue-mx400 (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (1)

x_refsource_MISCThird Party AdvisoryUS Government Resource
Source: [email protected]
https://ics-cert.us-cert.gov/advisories/ICSMA-18-156-01

CVSS

2.9LOW[email protected]
Confidentiality
PARTIAL
Integrity
NONE
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-200

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card