Philips Interventional Workspot (Release 1.3.2, 1.4.0, 1.4.1, 1.4.3, 1.4.5), Coronary Tools/Dynamic Coronary Roadmap/Stentboost Live (Release 1.0), ViewForum (Release 6.3V1L10). The software constructs all or part of an OS command using externally influenced input from an upstream component but does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when sent to a downstream component.
References
| Link | Resource |
|---|---|
| https://us-cert.cisa.gov/ics/advisories/icsma-21-019-01 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
|
History
02 Feb 2021, 19:03
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 3.3
v3 : 6.5 |
| CWE | CWE-78 | |
| CPE | cpe:2.3:a:philips:coronary_tools:1.0:*:*:*:*:*:*:* cpe:2.3:a:philips:interventional_workspot:1.4.1:*:*:*:*:*:*:* cpe:2.3:a:philips:viewforum:6.3v1l10:*:*:*:*:*:*:* cpe:2.3:a:philips:stentboost_live:1.0:*:*:*:*:*:*:* cpe:2.3:a:philips:dynamic_coronary_roadmap:1.0:*:*:*:*:*:*:* cpe:2.3:a:philips:interventional_workspot:1.4.3:*:*:*:*:*:*:* cpe:2.3:a:philips:interventional_workspot:1.4.5:*:*:*:*:*:*:* cpe:2.3:a:philips:interventional_workspot:1.4.0:*:*:*:*:*:*:* cpe:2.3:a:philips:interventional_workspot:1.3.2:*:*:*:*:*:*:* |
|
| References | (MISC) https://us-cert.cisa.gov/ics/advisories/icsma-21-019-01 - Third Party Advisory, US Government Resource |
26 Jan 2021, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-01-26 18:15
Updated : 2023-12-10 13:41
NVD link : CVE-2020-27298
Mitre link : CVE-2020-27298
CVE.ORG link : CVE-2020-27298
JSON object : View
Products Affected
philips
- dynamic_coronary_roadmap
- coronary_tools
- interventional_workspot
- stentboost_live
- viewforum
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')