What’s Vulnerable › Vulnerabilities

CVE-2020-16220: Philips Patient Monitoring Devices Improper Validation of Syntactic Correctness of Input

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-09-11 · updated 2026-06-17
• Weakness: CWE-1286

Description

In Patient Information Center iX (PICiX) Versions C.02, C.03, PerformanceBridge Focal Point Version A.01, the product receives input that is expected to be well-formed (i.e., to comply with a certain syntax) but it does not validate or incorrectly validates that the input complies with the syntax, causing the certificate enrollment service to crash. It does not impact monitoring but prevents new devices from enrolling.

Affected products

• Philips Patient Information Center iX (PICiX): b.02, c.02, c.03
• Philips PerformanceBridge Focal Point: a.01

References

• https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01
• https://www.philips.com/productsecurity
• https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01
• https://www.philips.com/productsecurity

Get alerted when CVE-2020-16220 or the next vulnerability affects your stack