PT-2020-14834 · Philips · Philips Suresigns Vs4

Published 2020-08-21 · Updated 2025-06-04 · CVE-2020-16241

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:P/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions Philips SureSigns VS4 versions A.07.107 and prior

Description The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Recommendations For Philips SureSigns VS4 versions A.07.107 and prior, consider restricting access to sensitive resources until a patch is available. As a temporary workaround, limit access to the system to minimize the risk of exploitation by unauthorized actors. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Improper Access Control

Weakness Enumeration

CWE-863

CWE-284

Related Identifiers

CVE-2020-16241

Affected Products

Philips Suresigns Vs4

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2020-16241 · Security Note
• https://osv.dev/vulnerability/CVE-2020-16241 · Vendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsma-20-233-01 · Note
• https://philips.com/a-w/security/security-advisories/product-security-2020.html#2020_archive · Note
• https://t.me/cvenotify/124682 · Telegram Post
• https://t.me/cvenotify/23599 · Telegram Post