CVE-2020-27260: Innokasmedical Vital Signs Monitor VC150 Firmware

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Innokas Yhtymä Oy Vital Signs Monitor VC150 prior to Version 1.7.15 HL7 v2.x injection vulnerabilities exist in the affected products that allow physically proximate attackers with a connected barcode reader to inject HL7 v2.x segments into specific HL7 v2.x messages via multiple expected parameters.

Affected products

• Innokasmedical Vital Signs Monitor VC150 Firmware: before 1.7.15 (fixed in 1.7.15)

Published 2021-01-08. Last modified 2026-06-17.