CVE-2020-27298: OS Command Injection
First published: Wed Jan 20 2021(Updated: )
Philips Interventional Workspot (Release 1.3.2, 1.4.0, 1.4.1, 1.4.3, 1.4.5), Coronary Tools/Dynamic Coronary Roadmap/Stentboost Live (Release 1.0), ViewForum (Release 6.3V1L10). The software constructs all or part of an OS command using externally influenced input from an upstream component but does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when sent to a downstream component.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Philips Coronary Tools | =1.0 | |
| Philips Dynamic Coronary Roadmap | =1.0 | |
| Philips Interventional Workspot | =1.3.2 | |
| Philips Interventional Workspot | =1.4.0 | |
| Philips Interventional Workspot | =1.4.1 | |
| Philips Interventional Workspot | =1.4.3 | |
| Philips Interventional Workspot | =1.4.5 | |
| Philips Stentboost Live | =1.0 | |
| Philips Viewforum | =6.3v1l10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this security issue?
The vulnerability ID of this security issue is CVE-2020-27298.
What is the affected software?
The affected software includes Philips Interventional Workspot (Release 1.3.2, 1.4.0, 1.4.1, 1.4.3, 1.4.5), Coronary Tools/Dynamic Coronary Roadmap/Stentboost Live (Release 1.0), and ViewForum (Release 6.3V1L10).
What is the severity rating of CVE-2020-27298?
The severity rating of CVE-2020-27298 is medium, with a severity value of 6.5.
What is the Common Weakness Enumeration (CWE) ID associated with this vulnerability?
The Common Weakness Enumeration (CWE) ID associated with this vulnerability is CWE-78.
How can I fix the vulnerability CVE-2020-27298?
To fix the vulnerability CVE-2020-27298, it is recommended to apply the necessary patches and updates provided by Philips.
- collector/nvd-index
- agent/author
- agent/weakness
- agent/references
- agent/severity
- agent/description
- agent/type
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/philips
- canonical/philips coronary tools
- version/philips coronary tools/1.0
- canonical/philips dynamic coronary roadmap
- version/philips dynamic coronary roadmap/1.0
- canonical/philips interventional workspot
- version/philips interventional workspot/1.3.2
- version/philips interventional workspot/1.4.0
- version/philips interventional workspot/1.4.1
- version/philips interventional workspot/1.4.3
- version/philips interventional workspot/1.4.5
- canonical/philips stentboost live
- version/philips stentboost live/1.0
- canonical/philips viewforum
- version/philips viewforum/6.3v1l10