CVE-2020-16241

Philips SureSigns VS4 (versions A.07.107 and earlier) is affected by CVE-2020-16241, an Improper Access Control vulnerability that could allow an unauthorized actor to access a resource. The issue is documented in multiple sources (NVD, Red Hat, CVE list, CISA ICS advisory) with evidence of impac...

CVE-2020-16237

CVE-2020-16237 affects Philips SureSigns VS4, specifically versions A.07.107 and earlier. The vulnerability stems from improper input validation where the device may receive data without ensuring it has the required properties, leading to unsafe processing. The authoritative source (ICS-CISA advi...

CVE-2020-16239

CVE-2020-16239 affects Philips SureSigns VS4 (A.07.107 and earlier). Root cause: Improper authentication where an actor’s claimed identity is not adequately proven. Consequence: potential unauthorized access to administrative controls; CVSS base 4.9 (NETWORK, LOW AI, HIGH privileges required, HIG...