Vulnerability · Published Sep 18, 2020 · Assigned by icscert
CVE-2020-16200Philips Clinical Collaboration Platform Algorithm Downgrade
Medium 6.5
In plain English
A medium-severity security flaw in Clinical Collaboration Platform from Philips. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.6%top 50.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not properly control the allocation and maintenance of a limited resource, thereby enabling an attacker to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Philips | Clinical Collaboration Platform | 0 – before 12.2.1 |
Weakness: CWE-757 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H