Vulnerability

Philips lists IntelliSpace Perinatal and consumer products under NAME:WRECK DNS flaws

MedDevice Cyber Staff · Apr 15 · 2 min read · Via Philips security advisory

Philips issued an advisory on April 15, 2021 on NAME:WRECK, nine DNS vulnerabilities reported by Forescout and JSOF. They affect DNS implementations in at least four common TCP/IP stacks: FreeBSD, IPNet, NetX and Nucleus NET.

Philips lists IntelliSpace Perinatal J.x alongside consumer and internal product names: Airvibe, Jaguar, Polaris Robot Vacuum Cleaner, Comfort, Mario, Puma, Microcube and SIMBA.

DNS parsing bugs hit before any login. A device that resolves names from an untrusted resolver is exposed.

Are you a representative of Philips? Submit an official response →

Remediation Desk

For ProvidersOperators, hospitals, and clinical engineering

Check the listed Philips products for the affected DNS clients and apply Philips updates when available. Point devices only at trusted internal resolvers. Manufacturers should record TCP/IP stack versions in their SBOMs.

Identify listed products. Find IntelliSpace Perinatal J.x and the other listed products in use.
Use trusted resolvers. Configure devices to resolve names only through controlled internal DNS servers.
Apply Philips updates. Install fixes as Philips releases them.
Record stack versions. Track embedded TCP/IP stacks such as NetX and Nucleus NET in SBOMs.

For Device ManufacturersAm I affected, and how to fix the class

Am I affected?

This class applies to devices with the signals and properties below. Check them against your product to gauge exposure.

Required

Off-the-shelf software

Contributing

Wired network

Fix the class in your product

The advisory is not for a bug you wrote; it is in a component you embed. As the maker, pin dependencies to fixed versions, generate an SBOM on every build including transitive components, and gate the pipeline on known-vulnerable components so an advisory maps to your products automatically.

Pin and inventory. Exact versions, and a CycloneDX or SPDX SBOM as a build artifact including transitive deps.
Gate on advisories. A CI scan fails a release carrying a component with a known advisory.
Own the field patch path. Know how you deliver a dependency or platform patch to fielded devices before you need it.

Mapped EMB3D mitigations

Products potentially also affected

Products whose own public documentation shares this advisory's attributes. A shared attribute is a lead, not a finding. The status column shows only what each manufacturer has said.

Product	Manufacturer	Shared with this advisory	Manufacturer status
DreamWear Silicone Pillows Mask	Philips	Names the affected product	No feedback feed from manufacturer

Questions & Answers

Which Philips products are affected by NAME:WRECK?

Philips' April 15, 2021 advisory lists IntelliSpace Perinatal J.x, Airvibe, Jaguar, Polaris Robot Vacuum Cleaner, Comfort, Mario, Puma, Microcube and SIMBA in connection with the NAME:WRECK DNS vulnerabilities.

What TCP/IP stacks does NAME:WRECK affect?

NAME:WRECK is a set of nine DNS vulnerabilities, reported by Forescout and JSOF, affecting at least four TCP/IP stacks: FreeBSD, IPNet, NetX and Nucleus NET. Philips addressed it on April 15, 2021.

← Back to Vulnerabilities