Lucene search

IcscertCVELIST:CVE-2020-27260

HistoryJan 08, 2021 - 3:17 p.m.

CVE-2020-27260

2021-01-0815:17:09

CWE-74

icscert

www.cve.org

innokas yhtymä oy

vital signs monitor

hl7 v2.x

injection vulnerabilities

barcode reader

physically proximate attackers

connected

segments

messages

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

29.0%

JSON

Innokas Yhtymä Oy Vital Signs Monitor VC150 prior to Version 1.7.15 HL7 v2.x injection vulnerabilities exist in the affected products that allow physically proximate attackers with a connected barcode reader to inject HL7 v2.x segments into specific HL7 v2.x messages via multiple expected parameters.

CNA Affected

[
  {
    "product": "BIGCOMPANYSOFT SOFTWARE PRODUCT",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VC150 prior to Version 1.7.15"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsma-21-007-01