CVE-2020-27260
Medium
Description
Innokas Yhtymä Oy Vital Signs Monitor VC150 prior to Version 1.7.15 HL7 v2.x injection vulnerabilities exist in the affected products that allow physically proximate attackers with a connected barcode reader to inject HL7 v2.x segments into specific HL7 v2.x messages via multiple expected parameters.
SeverityMedium
CVSS5.3
Exploit probability—
ProductInnokasmedical Vital Signs Monitor Vc150 Firmware
PublishedJan 8, 2021
First seenJan 8, 2021
Weakness typeCWE-74Injection
How to fix
Update
- innokasmedical vital_signs_monitor_vc150_firmware1.7.15 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| innokasmedical vital_signs_monitor_vc150_firmware | v < 1.7.15 | 1.7.15 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.