Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-16228

Philips Patient Monitoring Devices Improper Check for Certificate Revocation

Description

In Patient Information Center iX (PICiX) Versions C.02 and C.03, PerformanceBridge Focal Point Version A.01, IntelliVue patient monitors MX100, MX400-MX550, MX750, MX850, and IntelliVue X3 Versions N and prior, the software does not check or incorrectly checks the revocation status of a certificate, which may cause it to use a compromised certificate.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Philips Patient Information Center iX (PICiX)

Default version status: unaffected

  • C.02affected
  • C.03affected

Philips PerformanceBridge Focal Point

Default version status: unaffected

  • A.01affected

Philips IntelliVue patient monitors

Default version status: unaffected

  • MX100affected
  • MX400-MX550affected
  • MX750affected
  • MX850affected

Philips IntelliVue X3

Default version status: unaffected

  • 0 to ≤ Naffected

References