CVE-2020-16220

4.3 mediumEPSS 0.3%

Medium (4.3) in philips. EPSS 0.3% chance of exploitation in the next 30 days.

In Patient Information Center iX (PICiX) Versions C.02, C.03, PerformanceBridge Focal Point Version A.01, the product receives input that is expected to be well-formed (i.e., to comply with a certain syntax) but it does not validate or incorrectly validates that the input complies with the syntax, causing the certificate enrollment service to crash. It does not impact monitoring but prevents new devices from enrolling.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWE: CWE-1286
Published: 2020-09-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

philips:patient_information_center_ix
philips:performancebridge_focal_point

References

https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01
https://www.philips.com/productsecurity
https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01
https://www.philips.com/productsecurity

Check your stack JSON