What’s Vulnerable › Vulnerabilities

CVE-2020-16216: Philips Patient Monitoring Devices Improper Input Validation

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-09-11 · updated 2026-06-17
• Weakness: CWE-20

Description

In IntelliVue patient monitors MX100, MX400-550, MX600, MX700, MX750, MX800, MX850, MP2-MP90, and IntelliVue X2 and X3 Versions N and prior, the product receives input or data but does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly, which can induce a denial-of-service condition through a system restart.

Affected products

• Philips Intellivue Mp2-Mp90 Firmware: all versions
• Philips Intellivue Mx100 Firmware: all versions
• Philips Intellivue Mx400 Firmware: all versions
• Philips Intellivue Mx550 Firmware: all versions
• Philips Intellivue Mx600 Firmware: all versions
• Philips Intellivue Mx700 Firmware: all versions
• Philips Intellivue Mx750 Firmware: all versions
• Philips Intellivue Mx800 Firmware: all versions
• Philips Intellivue Mx850 Firmware: all versions
• Philips Intellivue X2 Firmware: all versions
• Philips Intellivue X3 Firmware: all versions
• Philips Patient Information Center iX (PICiX): b.02, c.02, c.03
• Philips PerformanceBridge Focal Point: a.01

References

• https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01
• https://www.philips.com/productsecurity
• https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01
• https://www.philips.com/productsecurity

Get alerted when CVE-2020-16216 or the next vulnerability affects your stack