CVEvulnerability
CVE-2020-15484
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-08-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-312
Description
An issue was discovered on Nescomed Multipara Monitor M1000 devices. The internal storage of the underlying Linux system stores data in cleartext, without integrity protection against tampering.
Affected configurations
• niscomed m1000 multipara patient monitor firmware
Related
Weakness · CWE (1)
- CWE-312 Cleartext Storage of Sensitive Information weakness
References
- https://payatu.com/advisory/lack-of-medical-data-encryption-in-niscomed-patient-monitor Third Party Advisory
- https://www.niscomed.com/multipara-monitor.html Product
- https://payatu.com/advisory/lack-of-medical-data-encryption-in-niscomed-patient-monitor Third Party Advisory
- https://www.niscomed.com/multipara-monitor.html Product