CVE-2024-48967 - "Philips Ventilator and Service PC Inadequate Audit Logging Weakness"

CVE ID : CVE-2024-48967
Published : Nov. 14, 2024, 10:15 p.m. | 24 minutes ago
Description : The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination. An attacker with access to the ventilator and/or the Service PC could, without detection, make unauthorized changes to ventilator settings that result in unauthorized disclosure of information and/or have unintended impacts on device performance.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...