CVE-2020-16228: Philips Patient Monitoring Devices Improper Check for Certificate Revocation
In Patient Information Center iX (PICiX) Versions C.02 and C.03, PerformanceBridge Focal Point Version A.01, IntelliVue patient monitors MX100, MX400-MX550, MX750, MX850, and IntelliVue X3 Versions N and prior, the software does not check or incorrectly checks the revocation status of a certificate, which may cause it to use a compromised certificate.
Other sources
Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, PerformanceBridge Focal Point Version A.01, IntelliVue patient monitors MX100, MX400-MX850, and MP2-MP90 Versions N and prior, IntelliVue X3 and X2 Versions N and prior. The software does not check or incorrectly checks the revocation status of a certificate, which may cause it to use a compromised certificate.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2020-16228.
What is the severity of CVE-2020-16228?
The severity of CVE-2020-16228 is medium with a severity value of 6.4.
Which software versions are affected by CVE-2020-16228?
The software versions affected by CVE-2020-16228 are Philips Patient Information Center iX B.02, C.02, C.03, PerformanceBridge Focal Point A.01, IntelliVue patient monitors MX100, MX400-MX850, and MP2-MP90 Versions N and prior, IntelliVue X3 and X2 Versions N and prior.
What is the vulnerability type of CVE-2020-16228?
The vulnerability type of CVE-2020-16228 is CWE-299.
How can I fix CVE-2020-16228?
To fix CVE-2020-16228, it is recommended to update to the latest version of the affected software or apply the necessary patches and mitigations recommended by the vendor.