CVE-2020-27278

2021-03-1521:21:38

CWE-798

icscert

www.cve.org

hamilton medical ag

t1-ventilator

hard-coded credentials

admin privileges

AI Score

Confidence

High

EPSS

0.001

Percentile

29.5%

JSON

In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, hard-coded credentials in the ventilator allow attackers with physical access to obtain admin privileges for the device’s configuration interface.

CNA Affected

[
  {
    "product": "Hamilton Medical AG, T1-Ventillator",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions 2.2.3 and prior"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsma-21-047-01