CVE-2020-16198

2020-09-1817:50:08

CWE-693

icscert

www.cve.org

philips software vulnerability

identity verification

cve-2020-16198

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

23.4%

JSON

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. When an attacker claims to have a given identity, the software does not prove or insufficiently proves the claim is correct.

CNA Affected

[
  {
    "product": "Philips Clinical Collaboration Platform",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions 12.2.1 and prior"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsma-20-261-01