Risk | Low |
Patch available | NO |
Number of vulnerabilities | 1 |
CVE-ID | CVE-2020-16200 |
CWE-ID | CWE-757 |
Exploitation vector | Local network |
Public exploit | N/A |
Vulnerable software Subscribe |
Clinical Collaboration Platform Hardware solutions / Medical equipment |
Vendor | Philips |
Security Bulletin
This security bulletin contains one low risk vulnerability.
EUVDB-ID: #VU46829
Risk: Low
CVSSv3.1: 6 [CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:U/RC:C]
CVE-ID: CVE-2020-16200
CWE-ID:
CWE-757 - Selection of Less-Secure Algorithm During Negotiat
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to bypass certain security restrictions.
The vulnerability exists due to the affected software does not properly control the allocation and maintenance of a limited resource. A remote attacker on the local network can influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
MitigationCybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsClinical Collaboration Platform: 12.2.1
External linkshttp://us-cert.cisa.gov/ics/advisories/icsma-20-261-01
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.