Philips Vulnerabilities and Affected Products
Vulnerabilities associated with SureSigns VS4.
Products
Clear product- e-Alert Unit (non-medical device)9 vulnerabilities
- Philips IntelliSpace Portal9 vulnerabilities
- Hue Bridge8 vulnerabilities
- Vue PACS8 vulnerabilities
- Patient Information Center iX (PICiX)7 vulnerabilities
- Vue Motion7 vulnerabilities
- Vue MyVue7 vulnerabilities
- Vue Speech7 vulnerabilities
- Clinical Collaboration Platform5 vulnerabilities
- Brilliance CT Scanners3 vulnerabilities
- IntelliSpace Portal3 vulnerabilities
- MRI 1.5T3 vulnerabilities
- MRI 3T3 vulnerabilities
- Patient Information Center iX (PIC iX)3 vulnerabilities
- PerformanceBridge Focal Point3 vulnerabilities
- SureSigns VS43 vulnerabilities
- DoseWise Portal2 vulnerabilities
- IntelliBridge EC 40 Hub2 vulnerabilities
- IntelliBridge EC 80 Hub2 vulnerabilities
- Intellispace Cardiovascular (ISCV)2 vulnerabilities
- IntelliSpace Cardiovascular (ISCV) products2 vulnerabilities
- IntelliVue MX40 Patient Worn Monitor2 vulnerabilities
- IntelliVue patient monitors2 vulnerabilities
- PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs2 vulnerabilities
- Philips Alice 6 System2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2020-16239MEDIUM | Philips SureSigns VS4 Improper AuthenticationWhen an actor claims to have a given identity, Philips SureSigns VS4, A.07.107 and prior does not prove or insufficiently proves the claim is correct. CWE-287Aug 21, 2020 | CVSS4.9v3.1 | EPSS1% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2020-16241MEDIUM | Philips SureSigns VS4 Improper Access ControlPhilips SureSigns VS4, A.07.107 and prior does not restrict or incorrectly restricts access to a resource from an unauthorized actor. | CVSS6.3v3.1 | EPSS0.256% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
Philips SureSigns VS4 Improper Input ValidationPhilips SureSigns VS4, A.07.107 and prior receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly. CWE-20Aug 21, 2020 | CVSS2.1v3.1 | EPSS0.339% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |