CVSS 3.1
6.4 mediumCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:LCVE-2020-16228
Medium (6.4) in philips. EPSS 0.4% chance of exploitation in the next 30 days.
In Patient Information Center iX (PICiX) Versions C.02 and C.03,
PerformanceBridge Focal Point Version A.01, IntelliVue patient monitors
MX100, MX400-MX550, MX750, MX850, and IntelliVue X3 Versions N and
prior, the software does not check or incorrectly checks the revocation
status of a certificate, which may cause it to use a compromised
certificate.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
- CWE
- CWE-299
- Published
- Modified
- Record from
- the NVD, synced
Affected
- philips:intellivue_mp2-mp90_firmware
- philips:intellivue_mx100_firmware
- philips:intellivue_mx400_firmware
- philips:intellivue_mx550_firmware
- philips:intellivue_mx600_firmware
- philips:intellivue_mx700_firmware
- philips:intellivue_mx750_firmware
- philips:intellivue_mx800_firmware
- philips:intellivue_mx850_firmware
- philips:intellivue_x2_firmware
- philips:intellivue_x3_firmware
- philips:patient_information_center_ix
- philips:performancebridge_focal_point