CVE-2020-27260

2021-01-0815:17:09

CWE-74

icscert

www.cve.org

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.0%

JSON

Innokas Yhtymä Oy Vital Signs Monitor VC150 prior to Version 1.7.15 HL7 v2.x injection vulnerabilities exist in the affected products that allow physically proximate attackers with a connected barcode reader to inject HL7 v2.x segments into specific HL7 v2.x messages via multiple expected parameters.

CNA Affected

[
  {
    "product": "BIGCOMPANYSOFT SOFTWARE PRODUCT",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VC150 prior to Version 1.7.15"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsma-21-007-01