medium6.4
CVE-2020-16228
In Patient Information Center iX (PICiX) Versions C.02 and C.03, PerformanceBridge Focal Point Version A.01, IntelliVue patient monitors MX100, MX400-MX550, MX…
Impact
In Patient Information Center iX (PICiX) Versions C.02 and C.03, PerformanceBridge Focal Point Version A.01, IntelliVue patient monitors MX100, MX400-MX550, MX750, MX850, and IntelliVue X3 Versions N and prior, the software does not check or incorrectly checks the revocation status of a certificate, which may cause it to use a compromised certificate.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Philips | Patient Information Center Ix | Versions b.02, c.02, c.03 |
| Philips | Performancebridge Focal Point | Version a.01 |
| Philips | Intellivue Mp2-Mp90 Firmware | All versions |
| Philips | Intellivue Mx100 Firmware | All versions |
| Philips | Intellivue Mx400 Firmware | All versions |
| Philips | Intellivue Mx850 Firmware | All versions |
| Philips | Intellivue X2 Firmware | All versions |
| Philips | Intellivue X3 Firmware | All versions |
| Philips | Intellivue Mx800 Firmware | All versions |
| Philips | Intellivue Mx750 Firmware | All versions |
| Philips | Intellivue Mx700 Firmware | All versions |
| Philips | Intellivue Mx600 Firmware | All versions |