In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an information disclosure vulnerability in the ventilator allows attackers with physical access to the configuration interface's logs to get valid checksums for tampered configuration files.
References
Link | Resource |
---|---|
https://us-cert.cisa.gov/ics/advisories/icsma-21-047-01 | Third Party Advisory US Government Resource |
https://us-cert.cisa.gov/ics/advisories/icsma-21-047-01 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
AND |
|
History
21 Nov 2024, 05:21
Type | Values Removed | Values Added |
---|---|---|
References | () https://us-cert.cisa.gov/ics/advisories/icsma-21-047-01 - Third Party Advisory, US Government Resource |
Information
Published : 2021-03-15 22:15
Updated : 2024-11-21 05:21
NVD link : CVE-2020-27290
Mitre link : CVE-2020-27290
CVE.ORG link : CVE-2020-27290
JSON object : View
Products Affected
hamilton-medical
- hamilton-t1
- hamilton-t1_firmware
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor