VULNERABILITY INTELLIGENCE
CVE-2020-27290
CVSS score4.3 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2021-03-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an information disclosure vulnerability in the ventilator allows attackers with physical access to the configuration interface's logs to get valid checksums for tampered configuration files.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-200
Primary references
- ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource