CVE-2024-9832 - Philips Ventilator Login Brute Force Vulnerability

CVE ID : CVE-2024-9832
Published : Nov. 14, 2024, 9:15 p.m. | 24 minutes ago
Description : There is no limit on the number of failed login attempts permitted with the Clinician Password or the Serial Number Clinician Password. An attacker could execute a brute-force attack to gain unauthorized access to the ventilator, and then make changes to device settings that could disrupt the function of the device and/or result in unauthorized information disclosure.
Severity: 9.3 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...