CVE-2020-27282

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an XML validation vulnerability in the ventilator allows privileged attackers with physical access to render the device persistently unusable by uploading specially crafted configuration files.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-112

Affected software

Vendor	Product	Versions
n/a	Hamilton Medical AG, T1-Ventillator	Versions 2.2.3 and prior

References

https://us-cert.cisa.gov/ics/advisories/icsma-21-047-01Third Party Advisory, US Government Resource
https://us-cert.cisa.gov/ics/advisories/icsma-21-047-01Third Party Advisory, US Government Resource

Timeline

Published: Mar 15, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-272835.3An attacker could send a specially crafted message to Crimson 3.1 (Build versions prior to 3119.001) that could leak arbitrary memory locati CVE-2020-272847.8TPEditor (v1.98 and prior) is vulnerable to two out-of-bounds write instances in the way it processes project files, allowing an attacker to CVE-2020-272859.1The default configuration of Crimson 3.1 (Build versions prior to 3119.001) allows a user to be able to read and modify the database without CVE-2020-272877.8Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds write while processing project files, which may all CVE-2020-272887.8An untrusted pointer dereference has been identified in the way TPEditor(v1.98 and prior) processes project files, allowing an attacker to c CVE-2020-272897.8Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a null pointer dereference issue while processing project files, which may allow CVE-2020-27295.4Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Advanced Console). Supported versions that are affecte CVE-2020-272904.3In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an information disclosure vulnerability in the ventilator allows attackers w CVE-2020-272917.8Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds read while processing project files, which may allo CVE-2020-272937.8Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a type confusion issue while processing project files, which may allow an attacke CVE-2020-272957.5The affected product has uncontrolled resource consumption issues, which may allow an attacker to cause a denial-of-service condition on the CVE-2020-272979.8The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to manipulate memory with controlled values