Vulnerability · Published Sep 18, 2020 · Assigned by icscert
CVE-2020-16247Philips Clinical Collaboration Platform Configuration
Medium 6.8
In plain English
A medium-severity security flaw in Clinical Collaboration Platform from Philips. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities).
Severity (CVSS 3.1)6.8Medium
Exploit odds (30 days)0.4%top 70.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Philips | Clinical Collaboration Platform | 0 – before 12.2.1 |
Weakness: CWE-16 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H