CVE-2020-27282

Published: Mar 15, 2021Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 0.7 / Impact: 3.6

Source: NVD

Description

In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an XML validation vulnerability in the ventilator allows privileged attackers with physical access to render the device persistently unusable by uploading specially crafted configuration files.

Affected (1)

Products: Hamilton Medical: Hamilton T1 Firmware

Hamilton Medical

1 product

Hamilton T1 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hamilton Medical Hamilton T1 Firmware	Up to 2.2.3

Running on/with	Platform Versions
Hamilton Medical Hamilton T1	All versions

Related CWEs

Missing XML Validation

The product accepts XML from an untrusted source but does not validate the XML against the proper schema.

References (2)

https://us-cert.cisa.gov/ics/advisories/icsma-21-047-01

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://us-cert.cisa.gov/ics/advisories/icsma-21-047-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.