CVE-2020-16214 Philips Patient Monitoring Devices Improper Neutralization of Formula Elements in a CSV File
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2020-16214?
CVE-2020-16214 is a medium-severity vulnerability in Philips Patient Information Center iX (PICiX), published on 11 Sep 2020.
Official description
In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the software saves user-provided information into a comma-separated value (CSV) file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by spreadsheet software.
Weakness: CWE-1236
Which versions are affected by CVE-2020-16214?
It affects 1 product.
Products include Philips Patient Information Center Ix.
How do I fix CVE-2020-16214?
No fix has been published for CVE-2020-16214 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-16214 being exploited?
There is no known exploitation of CVE-2020-16214 in the wild and no public exploit code.
Other vulnerabilities in Philips Patient Information Center iX (PICiX)
- CVE-2020-16222 Philips Patient Monitoring Devices Improper Authentication
- CVE-2020-16212 Philips Patient Monitoring Devices Exposure of Resource to Wrong Sphere
- CVE-2021-43548 Philips Patient Information Center iX (PIC iX) and Efficia CM Series Improper Input Validation
- CVE-2020-16224 Philips Patient Monitoring Devices Improper Handling of Length Parameter Inconsistency
- CVE-2021-43552 Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of Hard-coded Cryptographic Key
Sources
Also known as GHSA-5fjw-rfff-jp7h.