CVE-2020-16228 Philips Patient Monitoring Devices Improper Check for Certificate Revocation
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2020-16228?
CVE-2020-16228 is a medium-severity vulnerability in Philips IntelliVue X3, published on 11 Sep 2020.
Official description
In Patient Information Center iX (PICiX) Versions C.02 and C.03, PerformanceBridge Focal Point Version A.01, IntelliVue patient monitors MX100, MX400-MX550, MX750, MX850, and IntelliVue X3 Versions N and prior, the software does not check or incorrectly checks the revocation status of a certificate, which may cause it to use a compromised certificate.
Weakness: CWE-299
Which versions are affected by CVE-2020-16228?
It affects 13 products.
Products include Philips Intellivue Mp2-Mp90 Firmware, Philips Intellivue Mx100 Firmware, Philips Intellivue Mx400 Firmware, Philips Intellivue Mx550 Firmware, Philips Intellivue Mx600 Firmware, Philips Intellivue Mx700 Firmware and 7 more.
How do I fix CVE-2020-16228?
No fix has been published for CVE-2020-16228 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-16228 being exploited?
There is no known exploitation of CVE-2020-16228 in the wild and no public exploit code.
Other vulnerabilities in Philips IntelliVue X3
Sources
Also known as GHSA-g25m-mg72-9v2w.