ICSMA-21-047-01

icsaUScisa_csaf_ot

Hamilton-T1

view advisory published 2021-02-16

Successful exploitation of these vulnerabilities could allow attackers with physical access to the device to obtain sensitive information or crash the device being accessed.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2020-27290USmedium4.3—
In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an information disclosure vulnerability in the ventilator allows attackers with physical access to the configuration…
CVE-2020-27282USmedium4.3—
In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an XML validation vulnerability in the ventilator allows privileged attackers with physical access to render the dev…
CVE-2020-27278USmedium5.2OT elevated—
In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, hard-coded credentials in the ventilator allow attackers with physical access to obtain admin privileges for the dev…
02

references

External citations — patches, advisories, analysis.

03

remediations (3)

  • FixedT1 Ventilator

    Hamilton Medical recommends users of affected versions update to a version later than T1 Ventilator Version 2.2.3 where possible. Additionally, Hamilton Medical recommends users:

  • FixedT1 Ventilator

    Hamilton Medical recommends users of affected versions update to a version later than T1 Ventilator Version 2.2.3 where possible. Additionally, Hamilton Medical recommends users:

  • FixedT1 Ventilator

    Hamilton Medical recommends users of affected versions update to a version later than T1 Ventilator Version 2.2.3 where possible. Additionally, Hamilton Medical recommends users:

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan