CVE-2020-14477: Philips Affiniti 50 Firmware

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

In Philips Ultrasound ClearVue Versions 3.2 and prior, Ultrasound CX Versions 5.0.2 and prior, Ultrasound EPIQ/Affiniti Versions VM5.0 and prior, Ultrasound Sparq Version 3.0.2 and prior and Ultrasound Xperius all versions, an attacker may use an alternate path or channel that does not require authentication of the alternate service login to view or modify information.

Affected products

• Philips Affiniti 50 Firmware: up to and including 5.0
• Philips Affiniti 70 Firmware: up to and including 5.0
• Philips Clearvue 350 Firmware: up to and including 3.2
• Philips Clearvue 850 Firmware: up to and including 3.2
• Philips CX50 Firmware: version 5.0.2 only
• Philips Epiq 7 Firmware: up to and including 5.0
• Philips Sparq Firmware: up to and including 3.0.2
• Philips Xperius Firmware: any version

Published 2020-06-26. Last modified 2026-06-17.