CVE-2020-14477

🗓️ 26 Jun 2020 16:15:14Reported by icscertType

Philips Ultrasound ClearVue, Ultrasound CX, EPIQ, Affiniti, Sparq, and Xperius versions allow unauthorized access to sensitive information

Reporter	Title	Published	Views	Family All 8
Cvelist	CVE-2020-14477 Philips Ultrasound Systems Authentication Bypass Using an Alternate Path or Channel	26 Jun 202016:15	–	cvelist
EUVD	EUVD-2020-6613	7 Oct 202500:30	–	euvd
ICS	Philips Ultrasound Systems	25 Jun 202000:00	–	ics
NVD	CVE-2020-14477	26 Jun 202017:15	–	nvd
OSV	CVE-2020-14477	26 Jun 202017:15	–	osv
Prion	Path traversal	26 Jun 202017:15	–	prion
Positive Technologies	PT-2020-14029 · Philips · Philips Ultrasound Cx +4	26 Jun 202000:00	–	ptsecurity
RedhatCVE	CVE-2020-14477	22 May 202517:43	–	redhatcve

NVD

Vulners

Node

philips clearvue_850_firmwareRange≤3.2

AND

philips clearvue_850Match-

Node

philips clearvue_350_firmwareRange≤3.2

AND

philips clearvue_350Match-

Node

philips cx50_firmwareMatch5.0.2

AND

philips cx50Match-

Node

philips affiniti_70_firmwareRange≤5.0

AND

philips affiniti_70Match-

Node

philips affiniti_50_firmwareRange≤5.0

AND

philips affiniti_50Match-

Node

philips epiq_7_firmwareRange≤5.0

AND

philips epiq_7Match-

Node

philips sparq_firmwareRange≤3.0.2

AND

philips sparqMatch-

Node

philips xperius_firmware

AND

philips xperiusMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Ultrasound ClearVue",
    "vendor": "Philips",
    "versions": [
      {
        "lessThan": "versions 3.2",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Ultrasound CX",
    "vendor": "Philips",
    "versions": [
      {
        "lessThan": "versions 5.0.2",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Ultrasound EPIQ/Affiniti",
    "vendor": "Philips",
    "versions": [
      {
        "lessThan": "versions VM5.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Ultrasound Sparq",
    "vendor": "Philips",
    "versions": [
      {
        "lessThan": "version 3.0.2",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Ultrasound Xperius",
    "vendor": "Philips",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  }
]

Source	Link
us-cert	www.us-cert.gov/ics/advisories/icsma-20-177-01

04 Jun 2025 22:15Current

4.9Medium risk

Vulners AI Score4.9

CVSS 23.6

CVSS 3.13.6 - 4.4

EPSS0.00028