PT-2021-11362
CVE-2020-27278
·
تاريخ النشر
2021-03-15
·
تاريخ التحديث
2021-03-22
الوصف من
CVSS 3.1
5.2
متوسطةالمقاييسAV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
Hamilton Medical AG T1-Ventillator versions 2.2.3 and prior
Description:
The issue allows attackers with physical access to obtain admin privileges for the device's configuration interface due to hard-coded credentials in the ventilator.
Recommendations:
For versions 2.2.3 and prior, update to a version that removes the hard-coded credentials to prevent attackers from obtaining admin privileges.
As a temporary workaround, consider restricting physical access to the device until a patch is available.
Restrict access to the device’s configuration interface to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾