CVE-2020-16228

Published: Sep 11, 2020Modified: Jun 17, 2026

6.4

Vector

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L

Exploitability: 0.9 / Impact: 5.5

Source: NVD

Description

In Patient Information Center iX (PICiX) Versions C.02 and C.03, PerformanceBridge Focal Point Version A.01, IntelliVue patient monitors MX100, MX400-MX550, MX750, MX850, and IntelliVue X3 Versions N and prior, the software does not check or incorrectly checks the revocation status of a certificate, which may cause it to use a compromised certificate.

Affected (15)

Products: Philips: Patient Information Center Ix, Performancebridge Focal Point, Intellivue Mp2 Mp90 Firmware, Intellivue Mx100 Firmware, Intellivue Mx400 Firmware, Intellivue Mx850 Firmware, Intellivue X2 Firmware, Intellivue X3 Firmware, Intellivue Mx800 Firmware, Intellivue Mx750 Firmware, Intellivue Mx700 Firmware, Intellivue Mx600 Firmware, Intellivue Mx550 Firmware

Philips

13 products

Patient Information Center Ix

Performancebridge Focal Point

Intellivue Mp2 Mp90 Firmware

Intellivue Mx100 Firmware

Intellivue Mx400 Firmware

Intellivue Mx850 Firmware

Intellivue X2 Firmware

Intellivue X3 Firmware

Intellivue Mx800 Firmware

Intellivue Mx750 Firmware

Intellivue Mx700 Firmware

Intellivue Mx600 Firmware

Intellivue Mx550 Firmware

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Philips Patient Information Center Ix	Version b.02
Philips Patient Information Center Ix	Version c.02
Philips Patient Information Center Ix	Version c.03
Philips Performancebridge Focal Point	Version a.01

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue Mp2 Mp90 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue Mp2 Mp90	Version n

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue Mx100 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue Mx100	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue Mx400 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue Mx400	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue Mx850 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue Mx850	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue X2 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue X2	Version n

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue X3 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue X3	Version n

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue Mx800 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue Mx800	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue Mx750 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue Mx750	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue Mx700 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue Mx700	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue Mx600 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue Mx600	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellivue Mx550 Firmware	All versions

Running on/with	Platform Versions
Philips Intellivue Mx550	All versions

Related CWEs

CWE-299

Improper Check for Certificate Revocation

The product does not check or incorrectly checks the revocation status of a certificate, which may cause it to use a certificate that has been compromised.

References (4)

https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://www.philips.com/productsecurity

Source: ics-cert@hq.dhs.gov

https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

https://www.philips.com/productsecurity

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.