CVE-2020-16222

CVE-2020-16222: Philips Patient Monitoring Devices Improper Authentication

Vendor Philips

Product Patient Information Center iX (PICiX)

Weakness CWE-287 · Improper authentication

Published September 11, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In Patient Information Center iX (PICiX) Version B.02, C.02, C.03, and PerformanceBridge Focal Point Version A.01, when an actor claims to have a given identity, the software does not prove or insufficiently proves the claim is correct.

Key dates

02Disclosure timeline

September 11, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-16222 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/287.html

Identifiers

CVE CVE-2020-16222

CWE CWE-287

Affected versions

Vendor Philips

Product Patient Information Center iX (PICiX)

Affected B.02

Vendor Philips

Product Patient Information Center iX (PICiX)

Affected C.02

Vendor Philips

Product Patient Information Center iX (PICiX)

Affected C.03

Vendor Philips

Product PerformanceBridge Focal Point

Affected A.01