CVE-2020-27260CWE-74

Innokas Yhtymä Oy Vital Signs Monitor VC150 prior to Version 1.7.15 HL7 v2.x injection vulnerabilities exist in the affected products that allow physically…

published January 8, 2021

CVSS
—
EPSS
0%
Percentile
37.1
In the wild
Unconfirmed
What it is

Innokas Yhtymä Oy Vital Signs Monitor VC150 prior to Version 1.7.15 HL7 v2.x injection vulnerabilities exist in the affected products that allow physically proximate attackers with a connected barcode reader to inject HL7 v2.x segments into specific HL7 v2.x messages via multiple expected parameters.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00438 · 37.1th percentile
Weakness
CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Published
2021-01-08T15:17Z
EPSS history
Timeline
  • 08 JAN 15:17Z
    Innokas Yhtymä Oy Vital Signs Monitor VC150 prior to Version 1.7.15 HL7 v2.x injection vulnerabilities exist in the affected products that allow physically…
    cvelistv5