CVE-2020-16220
Last modified
CVE-2020-16220 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. In Patient Information Center iX (PICiX) Versions C.02, C.03, PerformanceBridge Focal Point Version A.01, the product receives input that is expected to be well-formed (i.e., to comply with a certain syntax) but it does not validate or incorrectly validates that the input complies with the syntax, causing the certificate enrollment service to crash. It does not impact monitoring but prevents new devices from enrolling.. EPSS estimates a 0.28% chance of exploitation in the next 30 days.
Description
In Patient Information Center iX (PICiX) Versions C.02, C.03, PerformanceBridge Focal Point Version A.01, the product receives input that is expected to be well-formed (i.e., to comply with a certain syntax) but it does not validate or incorrectly validates that the input complies with the syntax, causing the certificate enrollment service to crash. It does not impact monitoring but prevents new devices from enrolling.
Metrics
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Philips | Patient Information Center Ix | b.02 |
| Philips | Patient Information Center Ix | c.02 |
| Philips | Patient Information Center Ix | c.03 |
| Philips | Performancebridge Focal Point | a.01 |
References
- https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01Third Party Advisory, US Government Resource
- https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01Third Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-16220?
How severe is CVE-2020-16220?
How do I fix CVE-2020-16220?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-16215Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prio…7.8
- CVE-2020-16216In IntelliVue patient monitors MX100, MX400-550, MX600, MX70…6.5
- CVE-2020-16217Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prio…7.8
- CVE-2020-16218In Patient Information Center iX (PICiX) Versions B.02, C.02…3.5
- CVE-2020-16219Delta Electronics TPEditor Versions 1.97 and prior. An out-o…7.8
- CVE-2020-1622A local, authenticated user with shell can obtain the hashed…5.5
- CVE-2020-16221Delta Electronics TPEditor Versions 1.97 and prior. A stack-…7.8
- CVE-2020-16222In Patient Information Center iX (PICiX) Version B.02, C.02,…8.8
- CVE-2020-16223Delta Electronics TPEditor Versions 1.97 and prior. A heap-b…7.8
- CVE-2020-16224In Patient Information Center iX (PICiX) Versions C.02, C.03…6.5
- CVE-2020-16225Delta Electronics TPEditor Versions 1.97 and prior. A write-…7.8
- CVE-2020-16226Multiple Mitsubishi Electric products are vulnerable to impe…9.8
Are you affected by CVE-2020-16220?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST