CVE-2020-16200

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-16200

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

3.3 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:A/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 6.5 / Impact : 2.9

Access Vector ADJACENT_NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

P

hilips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not properly control the allocation and maintenance of a limited resource, thereby enabling an attacker to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References
Link Resource
https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01 Third Party Advisory US Government Resource
https://www.philips.com/a-w/security/security-advisories/product-security-2020.html#2020_archive
https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

cpe:2.3:a:philips:clinical_collaboration_platform:*:*:*:*:*:*:*:*
History

04 Jun 2025, 22:15

Type Values Removed Values Added
Summary (en) Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The software does not properly control the allocation and maintenance of a limited resource, thereby enabling an attacker to influence the amount of resources consumed, eventually leading to the exhaustion of available resources. (en) Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not properly control the allocation and maintenance of a limited resource, thereby enabling an attacker to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
References
  • () https://www.philips.com/a-w/security/security-advisories/product-security-2020.html#2020_archive -

21 Nov 2024, 05:06

Type Values Removed Values Added
References () https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01 - Third Party Advisory, US Government Resource () https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01 - Third Party Advisory, US Government Resource
Information

Published : 2020-09-18 18:15

Updated : 2025-06-04 22:15

NVD link : CVE-2020-16200

Mitre link : CVE-2020-16200

CVE.ORG link : CVE-2020-16200

JSON object : View

Products Affected

philips

CWE
CWE-757

Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')