PT-2021-11350
CVE-2020-27260
·
تاريخ النشر
2021-01-08
·
تاريخ التحديث
2021-01-14
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:P/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions:
Innokas Yhtymä Oy Vital Signs Monitor VC150 versions prior to 1.7.15
Description:
The issue allows physically proximate attackers with a connected barcode reader to inject HL7 v2.x segments into specific HL7 v2.x messages via multiple expected parameters. This is related to HL7 v2.x injection vulnerabilities in the affected products.
Recommendations:
For versions prior to 1.7.15, update to version 1.7.15 or later to resolve the issue. As a temporary workaround, consider restricting access to the barcode reader or limiting the ability to inject HL7 v2.x segments into messages until a patch is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾