Input Validation Flaw in Philips SureSigns VS4 Leads to Data Processing Risks
CVE-2020-16237

2.1LOW

Key Information:

Vendor
Philips
Status
Philips Suresigns Vs4
Vendor
CVE Published:
21 August 2020

Summary

The Philips SureSigns VS4 device exhibits an input validation flaw which allows it to receive data without proper verification. This may lead to unsafe data processing and manipulation of crucial information, potentially affecting the functionality and reliability of the device in clinical settings. It is essential for users and organizations utilizing Philips SureSigns VS4 to assess their risk exposure and implement necessary protective measures.

Affected Version(s)

Philips SureSigns VS4 A.07.107 and prior

References

https://us-cert.cisa.gov/ics/advisories/icsma-20-233-01
x_refsource_MISC

CVSS V3.1

Score:
2.1
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.