CVE-2017-9654

CVE-2017-9654 describes a critical vulnerability in Philips DoseWise Portal web-based application versions 1.1.7.333 and 2.1.1.3069, where login credentials are stored in clear text within backend system files. This flaw carries a high CVSS v3 score of 8.8, indicating that an authenticated attacker can remotely access sensitive information with low attack complexity, leading to a high impact on confidentiality, integrity, and availability. While the vulnerability has garnered some community discussion and media coverage, there is currently no evidence of active exploitation, nor are there publicly available exploit modules like Metasploit or Nuclei.