6.5
CVE-2025-27955
- EPSS 0.63%
- Veröffentlicht 02.06.2025 00:00:00
- Zuletzt bearbeitet 13.06.2025 18:00:47
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginClinical Collaboration Platform 12.2.1.5 has a weak logout system where the session token remains valid after logout and allows a remote attacker to obtain sensitive information and execute arbitrary code.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Philips ≫ Clinical Collaboration Platform Version12.2.1.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.63% | 0.703 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 6.5 | 3.9 | 2.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
|
CWE-1259 Improper Restriction of Security Token Assignment
The System-On-A-Chip (SoC) implements a Security Token mechanism to differentiate what actions are allowed or disallowed when a transaction originates from an entity. However, the Security Tokens are improperly protected.