CVE-2020-16220
Philips Patient Monitoring Devices Improper Validation of Syntactic Correctness of Input
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
11 sep 2020Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
In Patient Information Center iX (PICiX) Versions C.02, C.03,
PerformanceBridge Focal Point Version A.01, the product receives input
that is expected to be well-formed (i.e., to comply with a certain
syntax) but it does not validate or incorrectly validates that the input
complies with the syntax, causing the certificate enrollment service to
crash. It does not impact monitoring but prevents new devices from
enrolling.
Productos afectados
Philips · Patient Information Center iX (PICiX)Philips · PerformanceBridge Focal Point¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →