Vulnerabilities > Innokasmedical

DATE CVE VULNERABILITY TITLE RISK
2021-01-08 CVE-2020-27262 Cross-site Scripting vulnerability in Innokasmedical Vital Signs Monitor Vc150 Firmware
Innokas Yhtymä Oy Vital Signs Monitor VC150 prior to Version 1.7.15 A stored cross-site scripting (XSS) vulnerability exists in the affected products that allow an attacker to inject arbitrary web script or HTML via the filename parameter to multiple update endpoints of the administrative web interface.
3.5
2021-01-08 CVE-2020-27260 Injection vulnerability in Innokasmedical Vital Signs Monitor Vc150 Firmware
Innokas Yhtymä Oy Vital Signs Monitor VC150 prior to Version 1.7.15 HL7 v2.x injection vulnerabilities exist in the affected products that allow physically proximate attackers with a connected barcode reader to inject HL7 v2.x segments into specific HL7 v2.x messages via multiple expected parameters.
local
low complexity
innokasmedical CWE-74
2.1