CVE:CVE-2020-27298
CNNVD:CNNVD-202101-1616
Philips 多款产品存在操作系统命令注入漏洞，攻击者可以利用该漏洞修改系统预期执行的系统命令。以下设备或型号存在该漏洞：Interventional Workspot (Release 1.3.2, 1.4.0, 1.4.1, 1.4.3, 1.4.5)、Coronary Tools/Dynamic Coronary Roadmap/Stentboost Live (Release 1.0)、ViewForum (Release 6.3V1L10)。
solution:Upgrade philips coronary_tools to a higher version than 1.0,and avoid the version 1.0; Upgrade philips dynamic_coronary_roadmap to a higher version than 1.0,and avoid the version 1.0; Upgrade philips interventional_workspot to a higher version than 1.3.2,1.4.0,1.4.1,1.4.3,1.4.5,and avoid the version 1.3.2,1.4.0,1.4.1,1.4.3,1.4.5; Upgrade philips stentboost_live to a higher version than 1.0,and avoid the version 1.0; Upgrade philips viewforum to a higher version than 6.3v1l10,and avoid the version 6.3v1l10