CVEvulnerability

CVE-2020-27298

6.5 MEDIUM Published 2021-01-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-01-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
3.3 LOW — AV:A/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-78

Description

Philips Interventional Workspot (Release 1.3.2, 1.4.0, 1.4.1, 1.4.3, 1.4.5), Coronary Tools/Dynamic Coronary Roadmap/Stentboost Live (Release 1.0), ViewForum (Release 6.3V1L10). The software constructs all or part of an OS command using externally influenced input from an upstream component but does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when sent to a downstream component.

Affected configurations

• philips coronary tools 1.0 • philips dynamic coronary roadmap 1.0 • philips interventional workspot 1.3.2 • philips interventional workspot 1.4.0 • philips interventional workspot 1.4.1 • philips interventional workspot 1.4.3 • philips interventional workspot 1.4.5 • philips stentboost live 1.0 • philips viewforum 6.3v1l10

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References