Philips Suresigns VS4 Firmware vulnerabilities

3 CVEs affecting Philips Suresigns VS4 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-16241, published 2020-08-21.

More from Philips.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-16239, published 2020-08-21. Medium severity, CVSS 4.9. EPSS: 1% chance of exploitation in the next 30 days. When an actor claims to have a given identity, Philips SureSigns VS4, A.07.107 and prior does not prove or insufficiently proves the claim is correct.
• CVE-2020-16237, published 2020-08-21. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. Philips SureSigns VS4, A.07.107 and prior receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.
• CVE-2020-16241, published 2020-08-21. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. Philips SureSigns VS4, A.07.107 and prior does not restrict or incorrectly restricts access to a resource from an unauthorized actor.