CVE-2020-16220

Published: Sep 11, 2020Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

In Patient Information Center iX (PICiX) Versions C.02, C.03, PerformanceBridge Focal Point Version A.01, the product receives input that is expected to be well-formed (i.e., to comply with a certain syntax) but it does not validate or incorrectly validates that the input complies with the syntax, causing the certificate enrollment service to crash. It does not impact monitoring but prevents new devices from enrolling.

Affected (4)

Products: Philips: Patient Information Center Ix, Performancebridge Focal Point

Philips

2 products

Patient Information Center Ix

Performancebridge Focal Point

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Philips Patient Information Center Ix	Version b.02
Philips Patient Information Center Ix	Version c.02
Philips Patient Information Center Ix	Version c.03
Philips Performancebridge Focal Point	Version a.01

Related CWEs

CWE-1286

Improper Validation of Syntactic Correctness of Input

The product receives input that is expected to be well-formed - i.e., to comply with a certain syntax - but it does not validate or incorrectly validates that the input complies with the syntax.

References (4)

https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://www.philips.com/productsecurity

Source: ics-cert@hq.dhs.gov

https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

https://www.philips.com/productsecurity

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.