CVE-2020-27260
Last modified
CVE-2020-27260 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. Innokas Yhtymä Oy Vital Signs Monitor VC150 prior to Version 1.7.15 HL7 v2.x injection vulnerabilities exist in the affected products that allow physically proximate attackers with a connected barcode reader to inject HL7 v2.x segments into specific HL7 v2.x messages via multiple expected parameters.. EPSS estimates a 0.43% chance of exploitation in the next 30 days.
Description
Innokas Yhtymä Oy Vital Signs Monitor VC150 prior to Version 1.7.15 HL7 v2.x injection vulnerabilities exist in the affected products that allow physically proximate attackers with a connected barcode reader to inject HL7 v2.x segments into specific HL7 v2.x messages via multiple expected parameters.
Metrics
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Innokasmedical | Vital Signs Monitor Vc150 Firmware | < 1.7.15 |
References
- https://us-cert.cisa.gov/ics/advisories/icsma-21-007-01Third Party Advisory, US Government Resource
- https://us-cert.cisa.gov/ics/advisories/icsma-21-007-01Third Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-27260?
How severe is CVE-2020-27260?
How do I fix CVE-2020-27260?
Are you affected by CVE-2020-27260?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST