QwikSec

Security Database

CVE

CWE

Training

CVE-2020-27260

Published: Jan 8, 2021

Modified: Aug 4, 2024

PUBLISHED

Description

Innokas Yhtymä Oy Vital Signs Monitor VC150 prior to Version 1.7.15 HL7 v2.x injection vulnerabilities exist in the affected products that allow physically proximate attackers with a connected barcode reader to inject HL7 v2.x segments into specific HL7 v2.x messages via multiple expected parameters.

Vendor	Product	Versions
n/a	BIGCOMPANYSOFT SOFTWARE PRODUCT	affected `VC150 prior to Version 1.7.15`

Weaknesses (CWE)

References

https://us-cert.cisa.gov/ics/advisories/icsma-21-007-01

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.