CVE-2020-16214CWE-1236

Philips Patient Monitoring Devices Improper Neutralization of Formula Elements in a CSV File

published September 11, 2020

CVSS
—
EPSS
1%
Percentile
47.3
In the wild
Unconfirmed
What it is

In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the

software saves user-provided information into a comma-separated value

(CSV) file, but it does not neutralize or incorrectly neutralizes

special elements that could be interpreted as a command when the file is

opened by spreadsheet software.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00586 · 47.3th percentile
Weakness
CWE-1236 · Improper Neutralization of Formula Elements in a CSV File
Published
2020-09-11T12:53Z
EPSS history
Timeline
  • 11 SEP 12:53Z
    Philips Patient Monitoring Devices Improper Neutralization of Formula Elements in a CSV File
    cvelistv5