CVE-2020-14477CWE-288

Philips Ultrasound Systems Authentication Bypass Using an Alternate Path or Channel

Low · published June 26, 2020

CVSS v3.1
3.6
EPSS
0%
Percentile
21.4
In the wild
Unconfirmed
What it is

In Philips Ultrasound ClearVue Versions 3.2 and prior, Ultrasound CX Versions 5.0.2 and prior, Ultrasound EPIQ/Affiniti Versions VM5.0 and prior, Ultrasound Sparq Version 3.0.2 and prior and Ultrasound Xperius all versions, an attacker may use an alternate path or channel that does not require authentication of the alternate service login to view or modify information.

The record
Technical detail
CVSS v3.1
3.6 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00299 · 21.4th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2020-06-26T16:15Z
EPSS history
Timeline
  • 26 JUN 16:15Z
    Philips Ultrasound Systems Authentication Bypass Using an Alternate Path or Channel
    cvelistv5