Input Validation Flaw in Philips SureSigns VS4 Leads to Data Processing Risks
CVE-2020-16237

2.1LOW

Key Information:

Vendor

Philips
Status
Suresigns Vs4
Vendor
CVE Published:
21 August 2020

What is CVE-2020-16237?

The Philips SureSigns VS4 device exhibits an input validation flaw which allows it to receive data without proper verification. This may lead to unsafe data processing and manipulation of crucial information, potentially affecting the functionality and reliability of the device in clinical settings. It is essential for users and organizations utilizing Philips SureSigns VS4 to assess their risk exposure and implement necessary protective measures.

Affected Version(s)

SureSigns VS4 0

References

https://us-cert.cisa.gov/ics/advisories/icsma-20-233-01
x_refsource_MISC
https://www.philips.com/a-w/security/security-advisories/...

CVSS V3.1

Score:
2.1
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.