CVE-2020-14477 Details
Description
In Philips Ultrasound ClearVue Versions 3.2 and prior, Ultrasound CX Versions 5.0.2 and prior, Ultrasound EPIQ/Affiniti Versions VM5.0 and prior, Ultrasound Sparq Version 3.0.2 and prior and Ultrasound Xperius all versions, an attacker may use an alternate path or channel that does not require authentication of the alternate service login to view or modify information.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.us-cert.gov/ics/advisories/icsma-20-177-01 | CVE | Third Party AdvisoryUS Government Resource |
| https://www.us-cert.gov/ics/advisories/icsma-20-177-01 | [email protected] | Third Party AdvisoryUS Government Resource |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-287 | Improper Authentication | [email protected] |
| CWE-288 | Authentication Bypass Using an Alternate Path or Channel | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| philips clearvue 850 firmware | <= 3.2 |
CPE
Remediation
| |
| philips clearvue 850 | All versions |
CPE
Remediation
| |
| philips clearvue 350 firmware | <= 3.2 |
CPE
Remediation
| |
| philips clearvue 350 | All versions |
CPE
Remediation
| |
| philips cx50 firmware | 5.0.2 |
CPE
Remediation
| |
| philips cx50 | All versions |
CPE
Remediation
| |
| philips affiniti 70 firmware | <= 5.0 |
CPE
Remediation
| |
| philips affiniti 70 | All versions |
CPE
Remediation
| |
| philips affiniti 50 firmware | <= 5.0 |
CPE
Remediation
| |
| philips affiniti 50 | All versions |
CPE
Remediation
| |
| philips epiq 7 firmware | <= 5.0 |
CPE
Remediation
| |
| philips epiq 7 | All versions |
CPE
Remediation
| |
| philips sparq firmware | <= 3.0.2 |
CPE
Remediation
| |
| philips sparq | All versions |
CPE
Remediation
| |
| philips xperius firmware | All versions |
CPE
Remediation
| |
| philips xperius | All versions |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 4, 2025 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Jul 15, 2020 | Initial Analysis | [email protected] |