Information disclosure in Hamilton-medical Hamilton-t1
CVE-2020-27290
In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an information disclosure vulnerability in the ventilator allows attackers with physical access to the configuration interface's logs to get valid checksums for tampered confi…
Vulnerability class: Information Disclosure
EPSS: 0.003 (20.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Hamilton-medical Hamilton-t1
- Hamilton-medical Hamilton-t1_firmware
- N/a Hamilton Medical Ag, T1-ventillator — versions Versions 2.2.3 and prior
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-27290?
- CVE-2020-27290 is a medium-severity vulnerability in Hamilton-medical Hamilton-t1, classified under Information Disclosure. CVSS score: 4.3/10. Published 2021-03-15.
- How severe is CVE-2020-27290?
- Medium severity. CVSS v3 base score is 4.3 out of 10.