Unauthorized Access Vulnerability in Philips SureSigns VS4
CVE-2020-16241

2.1LOW

Key Information:

Vendor

Philips
Status
Suresigns Vs4
Vendor
CVE Published:
21 August 2020

What is CVE-2020-16241?

The Philips SureSigns VS4, up to version A.07.107, is susceptible to a vulnerability that allows unauthorized individuals to access restricted resources. The software fails to adequately restrict access control mechanisms, potentially leading to sensitive data exposure and unauthorized actions on the device. This poses significant risks to the integrity and confidentiality of patient information within healthcare environments.

Affected Version(s)

SureSigns VS4 0

References

https://us-cert.cisa.gov/ics/advisories/icsma-20-233-01
x_refsource_MISC
https://www.philips.com/a-w/security/security-advisories/...

CVSS V3.1

Score:
2.1
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.