Vulnerability · Published Sep 11, 2020 · Assigned by icscert
CVE-2020-16220Philips Patient Monitoring Devices Improper Validation of Syntactic Correctness of Input
Medium 4.3
In plain English
A medium-severity security flaw in Patient Information Center iX (PICiX) from Philips. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).
Official description
In Patient Information Center iX (PICiX) Versions C.02, C.03, PerformanceBridge Focal Point Version A.01, the product receives input that is expected to be well-formed (i.e., to comply with a certain syntax) but it does not validate or incorrectly validates that the input complies with the syntax, causing the certificate enrollment service to crash. It does not impact monitoring but prevents new devices from enrolling.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Philips | Patient Information Center iX (PICiX) | C.02C.03 |
| Philips | PerformanceBridge Focal Point | A.01 |
Weakness: CWE-1286