CVE-2017-9657 describes a vulnerability in the Philips IntelliVue MX40 WLAN monitor (Version B.06.18) where specific 802.11 network conditions can lead to a partial re-association. This can cause the central monitoring station to incorrectly indicate the MX40 is disconnected, while the device itself remains in telemetry mode (audio/screen off), preventing local alarming. Rated 6.5 (Medium) on the CVSS v3 scale, this vulnerability has an adjacent network attack vector with low complexity, and its primary impact is a high availability risk due to potential delays in patient treatment. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< b.06.18CPE matchmatch criteria | cpe:2.3:o:philips:intellivue_mx40_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.