What is CVE-2020-16241?

CVE-2020-16241 is a medium-severity vulnerability in Philips Suresigns Vs4, classified under Improper Access Control. CVSS score: 6.3/10. Published 2020-08-21.

How severe is CVE-2020-16241?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Auth bypass in Philips Suresigns Vs4

CVE-2020-16241

Philips SureSigns VS4, A.07.107 and prior does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

EPSS: 0.003 (17.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:H.

Affected products

Philips Suresigns Vs4 — versions 0
Philips Suresigns_vs4
Philips Suresigns_vs4_firmware

Weakness classification (CWE)

CWE-284 — Improper Access Control
CWE-863 — Incorrect Authorization

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
ics-cert@hq.dhs.gov

Frequently asked questions

What is CVE-2020-16241?: CVE-2020-16241 is a medium-severity vulnerability in Philips Suresigns Vs4, classified under Improper Access Control. CVSS score: 6.3/10. Published 2020-08-21.
How severe is CVE-2020-16241?: Medium severity. CVSS v3 base score is 6.3 out of 10.