CVE-2020-16228
Philips Patient Monitoring Devices Improper Check for Certificate Revocation
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In Patient Information Center iX (PICiX) Versions C.02 and C.03, PerformanceBridge Focal Point Version A.01, IntelliVue patient monitors MX100, MX400-MX550, MX750, MX850, and IntelliVue X3 Versions N and prior, the software does not check or incorrectly checks the revocation status of a certificate, which may cause it to use a compromised certificate.
Timeline
- CVE published
- Record last updated
Affected versions
- Philips Patient Information Center iX (PICiX)
C.02, C.03
- Philips PerformanceBridge Focal Point
A.01
- Philips IntelliVue patient monitors
MX100, MX400-MX550, MX750, MX850
- Philips IntelliVue X3
through N