Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-16220

In Patient Information Center iX (PICiX) Versions C.02, C.03, PerformanceBridge Focal Point Version A.01, the product receives input that is expected to be well-formed (i.e., to comply with a certain syntax) but it does not validate or incorrectly validates that the input complies with the syntax, causing the certificate enrollment service to crash. It does not impact monitoring but prevents new devices from enrolling.

Published

2020-09-11T14:15:11.503

Last Modified

2024-11-21T05:06:57.817

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

CVSSv2 Vector

AV:A/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: ADJACENT_NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

6.5

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-1286
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application philips patient_information_center_ix b.02 Yes
Application philips patient_information_center_ix c.02 Yes
Application philips patient_information_center_ix c.03 Yes
Application philips performancebridge_focal_point a.01 Yes
References