CVE-2020-16222

Published: Sep 11, 2020Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

In Patient Information Center iX (PICiX) Version B.02, C.02, C.03, and PerformanceBridge Focal Point Version A.01, when an actor claims to have a given identity, the software does not prove or insufficiently proves the claim is correct.

Affected (4)

Products: Philips: Patient Information Center Ix, Performancebridge Focal Point

Philips

2 products

Patient Information Center Ix

Performancebridge Focal Point

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Philips Patient Information Center Ix	Version b.02
Philips Patient Information Center Ix	Version c.02
Philips Patient Information Center Ix	Version c.03
Philips Performancebridge Focal Point	Version a.01

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (4)

https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://www.philips.com/productsecurity

Source: ics-cert@hq.dhs.gov

https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

https://www.philips.com/productsecurity

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.