CVE-2017-9656

CVE-2017-9656 describes a critical vulnerability in Philips DoseWise Portal versions 1.1.7.333 and 2.1.1.3069, where hard-coded database credentials with high privileges are present in backend system files. An attacker with elevated privileges to access these files could exploit this to compromise the confidentiality, integrity, and availability of the database, which contains Protected Health Information (PHI). With a CVSS v3 score of 9.1 (CRITICAL), the vulnerability has a network attack vector and low attack complexity, but requires high privileges for initial access. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in the CISA KEV catalog, though it has received some community discussion and media coverage.