Skip to content
CVE PROGRAM SOURCE RECORD3.6 Low

CVE-2020-14477

Philips Ultrasound Systems Authentication Bypass Using an Alternate Path or Channel

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

In Philips Ultrasound ClearVue Versions 3.2 and prior, Ultrasound CX Versions 5.0.2 and prior, Ultrasound EPIQ/Affiniti Versions VM5.0 and prior, Ultrasound Sparq Version 3.0.2 and prior and Ultrasound Xperius all versions, an attacker may use an alternate path or channel that does not require authentication of the alternate service login to view or modify information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Philips Ultrasound ClearVue

Default version status: unaffected

  • 0 to < versions 3.2affected

Philips Ultrasound CX

Default version status: unaffected

  • 0 to < versions 5.0.2affected

Philips Ultrasound EPIQ/Affiniti

Default version status: unaffected

  • 0 to < versions VM5.0affected

Philips Ultrasound Sparq

Default version status: unaffected

  • 0 to < version 3.0.2affected

Philips Ultrasound Xperius

Default version status: unaffected

  • all versionsaffected

References