CVE-2020-16247

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, 


exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
icscertCNA
6.8 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 17%
VendorProductVersion
philipsclinical_collaboration_platform
𝑥
≤ 12.2.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01
https://www.philips.com/a-w/security/security-advisories/product-security-2020.html#2020_archive
https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01