Read the docs
TI-2020-12766 Aliases CVE-2020-16237GHSA-c39v-2g86-xrr6

Philips SureSigns VS4 Improper Input Validation

Priority LOW 11CWE-20Published · Updated

Key facts

Attack vector
Physical
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Philips SureSigns VS4, A.07.107 and prior receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.

Why it matters now

EPSS 0.00339 27th percentileScored 2026-11-07
Fix Fixed SureSigns VS4 (Philips): A.07.107

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
PhilipsSureSigns VS4before A.07.107A.07.107Patch availableCNA
  • SureSigns VS4 VendorPhilips Affected before A.07.107 Fixed in A.07.107 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:philips:suresigns_vs4_firmware:*:*:*:*:*:*:*:*up to a.07.107VulnerablePhilips
cpe:2.3:h:philips:suresigns_vs4:-:*:*:*:*:*:*:*not specified by NVDRunning onPhilips
  • cpe:2.3:o:philips:suresigns_vs4_firmware:*:*:*:*:*:*:*:* Versions up to a.07.107 Vulnerable ·Philips
  • cpe:2.3:h:philips:suresigns_vs4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Philips

Remediation

  • Fix · CNA SureSigns VS4 (Philips) Fixed in A.07.107

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Philips SureSigns VS4 A.07.107

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2020-12770 Philips SureSigns VS4 Improper Access ControlPriority LOW 28
    • TI-2020-12768 Philips SureSigns VS4 Improper AuthenticationPriority LOW 24
    Show all 3 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-16237
  2. 2026-10-03 Alias added: GHSA-c39v-2g86-xrr6

References

Advisory 1

Other 1

  • TI-2020-12770 Philips SureSigns VS4 Improper Access Control CVSS 3.1MEDIUM 6.3
  • TI-2020-12768 Philips SureSigns VS4 Improper Authentication CVSS 3.1MEDIUM 4.9

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences