High 8.3HealthcarePublished Jun 5, 2018

CVE-2018-10597IntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M, IntelliVue Patient Monitors MX (MX400-550) Rev J-M and (X3/MX100 for Rev M only), and Avalon Fetal/Mate…

Updated under an hour ago (Oct 26, 2026, 7:30 PM ET)

Does this affect you?

It affects ICS-CERT IntelliVue Patient Monitors, Avalon Fetal/Maternal Monitors and 18 other products. Add what you run to find out whether that includes you.

EPSS puts the chance of exploitation in the next 30 days at 0.40%, higher than 34% of scored CVEs.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for ICS-CERT IntelliVue Patient Monitors, Avalon Fetal/Maternal Monitors

Exploited in the last 30 days

IntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M, IntelliVue Patient Monitors MX (MX400-550) Rev J-M and (X3/MX100 for Rev M only), and Avalon Fetal/Maternal Monitors FM20/FM30/FM40/FM50 with software Revisions F.0, G.0 and J.3 have a vulnerability that allows an unauthenticated attacker to access memory ("write-what-where") from an attacker-chosen device address within the same subnet.

CVSS: 8.3 HIGH (v3.1, NVD)CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Weakness (CWE): CWE-287
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): 0.40% (percentile 34)
Assigned by: icscert
NVD analysis: Modified
Record last updated: Sep 16, 2024
First seen by InfoSec Signals: Oct 12, 2026

Affected products

Affected products

ICS-CERT IntelliVue Patient Monitors, Avalon Fetal/Maternal Monitors ics_cert:intellivue_patient_monitors_avalon_fetal_maternal_monitors (from the name)	The following IntelliVue Patient Monitors versions are affected: IntelliVue Patient Monitors MP Series (includingMP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M, and IntelliVue Patient Monitors MX (MX400-550) Rev J-M and (X3/MX100 for Rev M only). The following Avalon Fetal/Maternal Monitors versions are affected: Avalon Fetal/Maternal Monitors FM20/FM30/FM40/FM50 with software Revisions F.0, G.0 and J.3	CNA record
philips intellivue_mp2_firmware philips:intellivue_mp2_firmware	all versions	NVD
philips intellivue_x2_firmware philips:intellivue_x2_firmware	all versions	NVD
philips intellivue_mp30_firmware philips:intellivue_mp30_firmware	all versions	NVD
philips intellivue_mp50_firmware philips:intellivue_mp50_firmware	all versions	NVD
philips intellivue_mp70_firmware philips:intellivue_mp70_firmware	all versions	NVD
philips intellivue_np90_firmware philips:intellivue_np90_firmware	all versions	NVD
philips intellivue_mx700_firmware philips:intellivue_mx700_firmware	all versions	NVD
philips intellivue_mx800_firmware philips:intellivue_mx800_firmware	all versions	NVD
philips intellivue_mx400_firmware philips:intellivue_mx400_firmware	all versions	NVD
1–10 of 19

References

References

https://ics-cert.us-cert.gov/advisories/ICSMA-18-156-01	x-refsource-misc, third-party-advisory, us-government-resource

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.