CVE-2020-27282

4.3 mediumEPSS 0.3%

Medium (4.3) in hamilton-medical hamilton-t1 firmware. EPSS 0.3% chance of exploitation in the next 30 days.

In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an XML validation vulnerability in the ventilator allows privileged attackers with physical access to render the device persistently unusable by uploading specially crafted configuration files.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
CWE: CWE-112
Published: 2021-03-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hamilton-medical:hamilton-t1_firmware

References

https://us-cert.cisa.gov/ics/advisories/icsma-21-047-01
https://us-cert.cisa.gov/ics/advisories/icsma-21-047-01

Check your stack JSON