Lucene search

[email protected]NVD:CVE-2020-14506

HistorySep 18, 2020 - 6:15 p.m.

CVE-2020-14506

2020-09-1818:15:16

CWE-352

[email protected]

web.nvd.nist.gov

philips

clinical collaboration platform

input validation

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

20.2%

JSON

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.

Affected configurations

Nvd

Node

philipsclinical_collaboration_platformRange≤12.2.1

VendorProductVersionCPE
philipsclinical_collaboration_platform*cpe:2.3:a:philips:clinical_collaboration_platform:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
philips	clinical_collaboration_platform	*	cpe:2.3:a:philips:clinical_collaboration_platform::::::::

References

us-cert.cisa.gov/ics/advisories/icsma-20-261-01

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

20.2%

JSON

Related for NVD:CVE-2020-14506

prion1 cvelist1 cve1 ics1