Unauthorized Access Vulnerability in Philips SureSigns VS4
CVE-2020-16241

2.1LOW

Key Information:

Vendor
Philips
Status
Philips Suresigns Vs4
Vendor
CVE Published:
21 August 2020

Summary

The Philips SureSigns VS4, up to version A.07.107, is susceptible to a vulnerability that allows unauthorized individuals to access restricted resources. The software fails to adequately restrict access control mechanisms, potentially leading to sensitive data exposure and unauthorized actions on the device. This poses significant risks to the integrity and confidentiality of patient information within healthcare environments.

Affected Version(s)

Philips SureSigns VS4 A.07.107 and prior

References

https://us-cert.cisa.gov/ics/advisories/icsma-20-233-01
x_refsource_MISC

CVSS V3.1

Score:
2.1
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.