High severity7.2NVD Advisory· Published Nov 17, 2017· Updated Jun 17, 2026

CVE-2017-14111

Description

The workstation logging function in Philips IntelliSpace Cardiovascular (ISCV) 2.3.0 and earlier and Xcelera R4.1L1 and earlier records domain authentication credentials, which if accessed allows an attacker to use credentials to access the application, or other user entitlements.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Philips/Intellispace Cardiovascular2 versions
cpe:2.3:a:philips:intellispace_cardiovascular:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:philips:intellispace_cardiovascular:*:*:*:*:*:*:*:*range: <=2.3.0
- (no CPE)range: <=2.3.0
Philips/Xcelera2 versions
cpe:2.3:a:philips:xcelera:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:philips:xcelera:*:*:*:*:*:*:*:*range: <=r4.1l1
- (no CPE)range: <=R4.1L1

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/101850nvdThird Party AdvisoryVDB Entry
ics-cert.us-cert.gov/advisories/ICSMA-17-318-01nvdIssue TrackingThird Party AdvisoryUS Government Resource
www.usa.philips.com/healthcare/about/customer-support/product-securitynvdIssue TrackingMitigationVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000