Input validation

Philips SureSigns VS4, A.07.107 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly...

Code injection

Philips SureSigns VS4, A.07.107 and prior. When an actor claims to have a given identity, the software does not prove or insufficiently proves the claim is correct...

Code injection

Philips SureSigns VS4, A.07.107 and prior. The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor...

Input validation

Philips DreamMapper, Version 2.24 and prior. Information written to log files can give guidance to a potential attacker...

CVE-2020-16239 Philips SureSigns VS4 Improper Authentication

When an actor claims to have a given identity, Philips SureSigns VS4, A.07.107 and prior does not prove or insufficiently proves the claim is correct...

CVE-2020-16239

CVE-2020-16239 affects Philips SureSigns VS4 (A.07.107 and earlier). Root cause: Improper authentication where an actor’s claimed identity is not adequately proven. Consequence: potential unauthorized access to administrative controls; CVSS base 4.9 (NETWORK, LOW AI, HIGH privileges required, HIG...

CVE-2020-16241 Philips SureSigns VS4 Improper Access Control

Philips SureSigns VS4, A.07.107 and prior does not restrict or incorrectly restricts access to a resource from an unauthorized actor...

CVE-2020-16241

Philips SureSigns VS4 (versions A.07.107 and earlier) is affected by CVE-2020-16241, an Improper Access Control vulnerability that could allow an unauthorized actor to access a resource. The issue is documented in multiple sources (NVD, Red Hat, CVE list, CISA ICS advisory) with evidence of impac...

CVE-2020-16237 Philips SureSigns VS4 Improper Input Validation

Philips SureSigns VS4, A.07.107 and prior receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly...

CVE-2020-16237

CVE-2020-16237 affects Philips SureSigns VS4, specifically versions A.07.107 and earlier. The vulnerability stems from improper input validation where the device may receive data without ensuring it has the required properties, leading to unsafe processing. The authoritative source (ICS-CISA advi...

CVE-2020-14518 Philips DreamMapper Insertion of Sensitive Information into Log File

Philips DreamMapper, Version 2.24 and prior. Information written to log files can give guidance to a potential attacker...

CVE-2020-14518

CVE-2020-14518 affects Philips DreamMapper 2.24 and earlier. Vulnerability: Information written to log files can guide an attacker; CVSSv3.1 base score 5.3 (Network, Low attack complexity, No privileges required). Affected product: DreamMapper mobile app; issue originates from insertion of sensit...

PT-2020-14053 · Philips · Dreammapper

Name of the Vulnerable Software and Affected Versions: Philips DreamMapper versions 2.24 and prior Description: The issue allows information written to log files to potentially guide an attacker. Recommendations: For versions 2.24 and prior, update to a version later than 2.24 to resolve the issu...

Philips SureSigns VS4 Input Validation Error Vulnerability

The Philips SureSigns VS4 is a vital signs monitor used to monitor physiological parameters in patients. An input validation error vulnerability exists in Philips SureSigns VS4 A.07.107 and earlier versions, which arises from the product not validating or failing to properly validate that inputs...

Philips SureSigns VS4 License Issue Vulnerability

The Philips SureSigns VS4 is a vital signs monitor used to monitor physiological parameters in patients. An authorization issue vulnerability exists in Philips SureSigns VS4 A.07.107 and earlier versions, which stems from the product's failure to properly validate a user's claimed identity, no...

PT-2020-14832 · Philips · Philips Suresigns Vs4

Name of the Vulnerable Software and Affected Versions: Philips SureSigns VS4 versions A.07.107 and prior Description: The software fails to properly verify the identity of an actor, allowing the actor to claim a given identity without sufficient proof that the claim is correct. Recommendations: F...

PT-2020-14834 · Philips · Philips Suresigns Vs4

Name of the Vulnerable Software and Affected Versions: Philips SureSigns VS4 versions A.07.107 and prior Description: The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor. Recommendations: For Philips SureSigns VS4 versions A.07.107 and prior,...

PT-2020-14831 · Philips · Philips Suresigns Vs4

Name of the Vulnerable Software and Affected Versions: Philips SureSigns VS4 versions A.07.107 and prior Description: The issue arises because the product does not properly validate input or data it receives, which can lead to incorrect processing. Recommendations: For Philips SureSigns VS4...

Philips SureSigns VS4 Access Control Error Vulnerability

The Philips SureSigns VS4 is a vital signs monitor used to monitor physiological parameters in patients. An access control error vulnerability exists in Philips SureSigns VS4 A.07.107 and earlier versions. An attacker could exploit the vulnerability to gain unauthorized access to resources...

Philips SureSigns VS4

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION : Exploitable remotely Vendor : Philips Equipment : SureSigns VS4 Vulnerabilities : Improper Input Validation, Improper Access Control, Improper Authentication 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker...