Philips Interventional Workspot (Release 1.3.2, 1.4.0, 1.4.1, 1.4.3, 1.4.5), Coronary Tools/Dynamic Coronary Roadmap/Stentboost Live (Release 1.0), ViewForum (Release 6.3V1L10). The software constructs all or part of an OS command using externally influenced input from an upstream component but does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when sent to a downstream component.
References
| Link | Resource |
|---|---|
| https://us-cert.cisa.gov/ics/advisories/icsma-21-019-01 | Third Party Advisory US Government Resource |
| https://us-cert.cisa.gov/ics/advisories/icsma-21-019-01 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 05:21
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://us-cert.cisa.gov/ics/advisories/icsma-21-019-01 - Third Party Advisory, US Government Resource |
Information
Published : 2021-01-26 18:15
Updated : 2024-11-21 05:21
NVD link : CVE-2020-27298
Mitre link : CVE-2020-27298
CVE.ORG link : CVE-2020-27298
JSON object : View
Products Affected
philips
- stentboost_live
- viewforum
- coronary_tools
- dynamic_coronary_roadmap
- interventional_workspot
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')