Philips IntelliSpace Cardiovascular Vulnerabilities

An attacker with local access to the cardiovascular imaging server could gain administrative control and execute arbitrary commands, potentially modifying patient data, altering image analysis results, or disrupting clinical operations.

Hospital cardiology departments and imaging centers using Philips IntelliSpace Cardiovascular or Xcelera systems should assess this risk. These are cardiovascular imaging analysis servers used for clinical diagnosis and treatment planning.

An attacker with user-level credentials and local access to the ISCV or Xcelera server exploits a privilege escalation flaw to gain administrative privileges, then executes arbitrary code to compromise the system.