Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2020-27298

Philips Interventional Workstations OS Command Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Philips Interventional Workspot (Release 1.3.2, 1.4.0, 1.4.1, 1.4.3, 1.4.5), Coronary Tools/Dynamic Coronary Roadmap/Stentboost Live (Release 1.0), ViewForum (Release 6.3V1L10). The software constructs all or part of an OS command using externally influenced input from an upstream component but does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when sent to a downstream component.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Philips Interventional Workspot

Default version status: unaffected

  • Release 1.3.2affected
  • Release 1.4.0affected
  • Release 1.4.1affected
  • Release 1.4.3affected
  • Release 1.4.5affected

Philips Coronary Tools/Dynamic Coronary Roadmap/Stentboost Live

Default version status: unaffected

  • Release 1.0affected

Philips ViewForum

Default version status: unaffected

  • Release 6.3V1L10affected

References