CVE-2020-16220CWE-1286

Philips Patient Monitoring Devices Improper Validation of Syntactic Correctness of Input

published September 11, 2020

CVSS
—
EPSS
0%
Percentile
19.4
In the wild
Unconfirmed
What it is

In Patient Information Center iX (PICiX) Versions C.02, C.03,

PerformanceBridge Focal Point Version A.01, the product receives input

that is expected to be well-formed (i.e., to comply with a certain

syntax) but it does not validate or incorrectly validates that the input

complies with the syntax, causing the certificate enrollment service to

crash. It does not impact monitoring but prevents new devices from

enrolling.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00280 · 19.4th percentile
Weakness
CWE-1286 · Improper Validation of Syntactic Correctness of Input
Published
2020-09-11T13:11Z
EPSS history
Timeline
  • 11 SEP 13:11Z
    Philips Patient Monitoring Devices Improper Validation of Syntactic Correctness of Input
    cvelistv5