CVE-2020-27260

5.3 mediumEPSS 0.4%

Medium (5.3) in innokasmedical vital signs monitor vc150 firmware. EPSS 0.4% chance of exploitation in the next 30 days.

Innokas Yhtymä Oy Vital Signs Monitor VC150 prior to Version 1.7.15 HL7 v2.x injection vulnerabilities exist in the affected products that allow physically proximate attackers with a connected barcode reader to inject HL7 v2.x segments into specific HL7 v2.x messages via multiple expected parameters.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
CWE: CWE-74
Published: 2021-01-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

innokasmedical:vital_signs_monitor_vc150_firmware

References

https://us-cert.cisa.gov/ics/advisories/icsma-21-007-01
https://us-cert.cisa.gov/ics/advisories/icsma-21-007-01

Check your stack JSON