CVE-2020-15485

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The onboard Flash memory stores data in cleartext, without integrity protection against tampering.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-312

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://payatu.com/advisory/lack-of-medical-data-encryption-in-dr-trust-ecg-or-ekg-penThird Party Advisory
https://www.niscomed.com/multipara-monitor.htmlProduct, Vendor Advisory
https://payatu.com/advisory/lack-of-medical-data-encryption-in-dr-trust-ecg-or-ekg-penThird Party Advisory
https://www.niscomed.com/multipara-monitor.htmlProduct, Vendor Advisory

Timeline

Published: Aug 26, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-154866.5An issue was discovered on Dr Trust ECG Pen 2.00.08 devices. Because the Bluetooth LE support is implemented without a requirement for pairi CVE-2020-154879.8Re:Desk 2.3 contains a blind unauthenticated SQL injection vulnerability in the getBaseCriteria() function in the protected/models/Ticket.ph CVE-2020-154887.5Re:Desk 2.3 allows insecure file upload.CVE-2020-154899.8An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple shell metacharacter injection vulnerabilities exist in CVE-2020-15497.8An elevation of privilege vulnerability exists when the Windows CDP User Components improperly handle memory. To exploit this vulnerability,CVE-2020-154909.8An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple buffer overflow vulnerabilities exist in CGI scripts, l CVE-2020-154929.8An issue was discovered in INNEO Startup TOOLS 2017 M021 12.0.66.3784 through 2018 M040 13.0.70.3804. The sut_srv.exe web application (serve CVE-2020-154957.8Acronis True Image 2019 update 1 through 2020 on macOS allows local privilege escalation due to an insecure XPC service configuration.CVE-2020-154967.8Acronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to insecure folder permissions.CVE-2020-154976.1jcore/portal/ajaxPortal.jsp in Jalios JCMS 10.0.2 build-20200224104759 allows XSS via the types parameter. Note: It is asserted that this vu CVE-2020-154985.9An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.385_20253. The router accepts an arbitrary server certificate for a firmwa CVE-2020-154996.1An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.385_20253. They allow XSS via spoofed Release Notes on the Firmware Upgrad