Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-14477

In Philips Ultrasound ClearVue Versions 3.2 and prior, Ultrasound CX Versions 5.0.2 and prior, Ultrasound EPIQ/Affiniti Versions VM5.0 and prior, Ultrasound Sparq Version 3.0.2 and prior and Ultrasound Xperius all versions, an attacker may use an alternate path or channel that does not require authentication of the alternate service login to view or modify information.

Published

2020-06-26T17:15:10.280

Last Modified

2025-06-04T22:15:22.960

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 3.6 (LOW)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:P/A:N

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

3.9

Impact Score

4.9

Weaknesses
  • Type: Secondary
    CWE-288
  • Type: Primary
    CWE-287
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System philips clearvue_850_firmware ≤ 3.2 Yes
Hardware philips clearvue_850 - No
Operating System philips clearvue_350_firmware ≤ 3.2 Yes
Hardware philips clearvue_350 - No
Operating System philips cx50_firmware 5.0.2 Yes
Hardware philips cx50 - No
Operating System philips affiniti_70_firmware ≤ 5.0 Yes
Hardware philips affiniti_70 - No
Operating System philips affiniti_50_firmware ≤ 5.0 Yes
Hardware philips affiniti_50 - No
Operating System philips epiq_7_firmware ≤ 5.0 Yes
Hardware philips epiq_7 - No
Operating System philips sparq_firmware ≤ 3.0.2 Yes
Hardware philips sparq - No
Operating System philips xperius_firmware * Yes
Hardware philips xperius - No
References