CVE-2020-16222 Philips Patient Monitoring Devices Improper Authentication

2020-09-1112:55:23

CWE-287

icscert

www.cve.org

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.6%

JSON

In Patient Information Center iX (PICiX) Version B.02, C.02, C.03, and
PerformanceBridge Focal Point Version A.01, when an actor claims to have
a given identity, the software does not prove or insufficiently proves
the claim is correct.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Patient Information Center iX (PICiX)",
    "vendor": "Philips",
    "versions": [
      {
        "status": "affected",
        "version": "B.02"
      },
      {
        "status": "affected",
        "version": "C.02"
      },
      {
        "status": "affected",
        "version": "C.03"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "PerformanceBridge Focal Point",
    "vendor": "Philips",
    "versions": [
      {
        "status": "affected",
        "version": "A.01"
      }
    ]
  }
]