Lucene search

[email protected]CVE-2020-15484

HistoryAug 26, 2020 - 3:15 p.m.

CVE-2020-15484

2020-08-2615:15:12

CWE-312

[email protected]

web.nvd.nist.gov

cve-2020-15484

nescomed multipara monitor

m1000

data security

integrity protection

linux system

cleartext storage

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.1%

JSON

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The internal storage of the underlying Linux system stores data in cleartext, without integrity protection against tampering.

Affected configurations

NVD

Node

niscomedm1000_multipara_patient_monitor_firmwareMatch-

AND

niscomedm1000_multipara_patient_monitorMatch-

CPENameOperatorVersion
niscomed:m1000_multipara_patient_monitor_firmwareniscomed m1000 multipara patient monitor firmwareeq-

CPE	Name	Operator	Version
niscomed:m1000_multipara_patient_monitor_firmware	niscomed m1000 multipara patient monitor firmware	eq	-

References

payatu.com/advisory/lack-of-medical-data-encryption-in-niscomed-patient-monitor

www.niscomed.com/multipara-monitor.html

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.1%

JSON

Related for CVE-2020-15484

nvd1 prion1 cvelist1