CVE-2020-16214
mediumPriorität · verfolgen · 20EPSS 0.006 · 48. PerzentilEUUSEPSS · bewertet 2026-10-27
In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the software saves user-provided information into a comma-separated value (CSV) file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by spreadsheet software.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenIntelliVue patient monitor MP2-MP90cisa_csaf_ot
IntelliVue Patient Monitors Versions N.00 and N.01
- BehobenIntelliVue patient monitor MX100cisa_csaf_ot
IntelliVue Patient Monitors Versions N.00 and N.01
- BehobenIntelliVue patient monitor MX400-MX850cisa_csaf_ot
IntelliVue Patient Monitors Versions N.00 and N.01
- BehobenPatient Information Center iX (PICiX)cisa_csaf_ot
Patient Information Center iX (PICiX) Version C.03
- BehobenPerformanceBridge Focal Pointcisa_csaf_ot
PerformanceBridge Focal Point
- MitigationIntelliVue X2cisa_csaf_ot
As a mitigation to these vulnerabilities, Philips recommends the following:
- MitigationIntelliVue X3cisa_csaf_ot
As a mitigation to these vulnerabilities, Philips recommends the following:
- MitigationIntelliVue patient monitor MP2-MP90cisa_csaf_ot
As a mitigation to these vulnerabilities, Philips recommends the following:
- MitigationIntelliVue patient monitor MX100cisa_csaf_ot
As a mitigation to these vulnerabilities, Philips recommends the following:
- MitigationIntelliVue patient monitor MX400-MX850cisa_csaf_ot
As a mitigation to these vulnerabilities, Philips recommends the following:
- MitigationPatient Information Center iX (PICiX)cisa_csaf_ot
As a mitigation to these vulnerabilities, Philips recommends the following:
- MitigationPerformanceBridge Focal Pointcisa_csaf_ot
As a mitigation to these vulnerabilities, Philips recommends the following:
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (22)
Betroffene Produkte und Versionsbereiche.
- philips patient information center ix= b.02nvdUScpe:2.3:a:philips:patient_information_center_ix:*:*:*:*:*:*:*:*
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSMA-20-254-01Philips Patient Monitoring Devices (Update C)2020-09-10icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could result in unauthorized access, interrupted monitoring, and collection of access information and/or patient data. To successfully exploit these vulnerabilities, an attacker would need to gain either physical access to surveillance stations and patient monitors or access to the medical device network.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (9)
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/security/cve/cve-2020-16214cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2020-16214cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01cnnvd
- https://www.auscert.org.au/bulletins/ESB-2020.3140/cnnvd
- https://www.philips.com/productsecuritycnnvd
- https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01enisa_euvd
- https://www.philips.com/productsecurityenisa_euvd
- https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01Third Party AdvisoryUS Government Resourcenvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan