CVE:CVE-2018-10601
CNNVD:CNNVD-201806-303
Philips IntelliVue Patient Monitors MP2等都是荷兰飞利浦（Philips）公司的产品。Philips IntelliVue Patient Monitors MP2是一款MP系列的病人监护仪设备。Avalon Fetal/Maternal Monitors FM20是一款母婴监护仪设备。
多款Philips产品中存在基于栈的缓冲区溢出漏洞。攻击者可利用该漏洞从其选定的设备地址（同一子网络内）中读取内存。以下产品和版本受到影响：Philips IntelliVue Patient Monitors MP2/X2/MP30/MP50/MP70/NP90/MX700/800 B修订版至M修订版；IntelliVue Patient Monitors MX400-550 J修订版至M修订版；X3/MX100 M修订版；使用F.0、G.0和J.3软件修订版的Avalon Fetal/Maternal Monitors FM20/FM30/FM40/FM50。
solution:Upgrade philips intellivue_mp2_firmware to a higher version than -; Upgrade philips intellivue_x2_firmware to a higher version than -; Upgrade philips intellivue_mp30_firmware to a higher version than -; Upgrade philips intellivue_mp50_firmware to a higher version than -; Upgrade philips intellivue_mp70_firmware to a higher version than -; Upgrade philips intellivue_np90_firmware to a higher version than -; Upgrade philips intellivue_mx700_firmware to a higher version than -; Upgrade philips intellivue_mx800_firmware to a higher version than -; Upgrade philips intellivue_mx400_firmware to a higher version than -; Upgrade philips intellivue_mx450_firmware to a higher version than -; Upgrade philips intellivue_mx500_firmware to a higher version than -; Upgrade philips intellivue_mx550_firmware to a higher version than -; Upgrade philips intellivue_x3_firmware to a higher version than -; Upgrade philips intellivue_mx100_firmware to a higher version than -; Upgrade philips avalon_fetal/maternal_monitors_fm20_firmware to a higher version than -; Upgrade philips avalon_fetal/maternal_monitors_fm30_firmware to a higher version than -; Upgrade philips avalon_fetal/maternal_monitors_fm40_firmware to a higher version than -; Upgrade philips avalon_fetal/maternal_monitors_fm50_firmware to a higher version than -