Medium ICSMA-21-047-01 3 CVEs

Hamilton-T1

Published Feb 16, 2021 · Updated Feb 16, 2021

Vendor: Hamilton Medical Product: T1 Ventilator

Summary

Successful exploitation of these vulnerabilities could allow attackers with physical access to the device to obtain sensitive information or crash the device being accessed.

Vulnerabilities 3

Unscored —

CVE-2020-27278

In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, hard-coded credentials in the ventilator allow attacker…

Mar 15, 2021
Unscored —

CVE-2020-27282

In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an XML validation vulnerability in the ventilator allow…

Mar 15, 2021
Unscored —

CVE-2020-27290

In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an information disclosure vulnerability in the ventilat…

Mar 15, 2021

Revision history

2021-02-16 #1
ICSMA-21-047-01 Hamilton T1

References

ICS Advisory ICSMA-21-047-01 Web Version
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-21-047-01
Recommended Practices
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-21-047-01
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B