CVE-2020-27278

MEDIUM

Hamilton Medical AG T1-Ventillator <2.2.3 - Privilege Escalation

Title source: llm

Description

In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, hard-coded credentials in the ventilator allow attackers with physical access to obtain admin privileges for the device’s configuration interface.

References (1)

Core 1

Core References

Third Party Advisory, US Government Resource x_refsource_misc

https://us-cert.cisa.gov/ics/advisories/icsma-21-047-01

Scores

CVSS v3 5.2

EPSS 0.0027

EPSS Percentile 18.7%

Attack Vector PHYSICAL

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Details

CWE

CWE-798

Status published

Products (1)

hamilton-medical/hamilton-t1_firmware < 2.2.3

Published Mar 15, 2021

Tracked Since Feb 18, 2026