CVE-2020-16198

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

When an attacker claims to have a given identity,

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not prove or insufficiently proves the claim is correct.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-693

Affected software

VendorProductVersions
PhilipsClinical Collaboration Platform< 12.2.1

References

Timeline

Published
Sep 18, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-161997.8Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple stack-based buffer overflow vulnerabilities may be exCVE-2020-16205.5A local, authenticated user with shell can obtain the hashed values of login passwords via configd streamer log. This issue affects all versCVE-2020-162006.5Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not properly control the allocation and maintenance of a limited CVE-2020-162013.3Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple out-of-bounds read vulnerabilities may be exploited bCVE-2020-162027.8WebAccess Node (All versions prior to 9.0.1) has incorrect permissions set for resources used by specific services, which may allow code exeCVE-2020-162037.8Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. An uninitialized pointer may be exploited by processing a specCVE-2020-162049.8The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as CVE-2020-162057.2Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code (Firmware Versions 1CVE-2020-162069.0The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain acCVE-2020-162077.8Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by openiCVE-2020-162088.8The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different configurations of a deviceCVE-2020-162099.8A malicious attacker could exploit the interface of the Fieldcomm Group HART-IP (release 1.0.0.0) by constructing messages with sufficiently
CVE-2020-16198: Medium severity, CVSS 6.3 | Vulnix