6.5

CVE-2020-16216

In IntelliVue patient monitors MX100, MX400-550, MX600, MX700, MX750, 
MX800, MX850, MP2-MP90, and IntelliVue X2 and X3 Versions N and prior, 
the product receives input or data but does not validate or incorrectly 
validates that the input has the properties required to process the data
 safely and correctly, which can induce a denial-of-service condition 
through a system restart.

Data is provided by the National Vulnerability Database (NVD)
Philips ≫ Intellivue Mx100 Firmware Version-
   Philips ≫ Intellivue Mx100 Version-
Philips ≫ Intellivue Mx400 Firmware Version-
   Philips ≫ Intellivue Mx400 Version-
Philips ≫ Intellivue Mx850 Firmware Version-
   Philips ≫ Intellivue Mx850 Version-
Philips ≫ Intellivue X2 Firmware Version-
   Philips ≫ Intellivue X2 Versionn
Philips ≫ Intellivue X3 Firmware Version-
   Philips ≫ Intellivue X3 Versionn
Philips ≫ Intellivue Mx800 Firmware Version-
   Philips ≫ Intellivue Mx800 Version-
Philips ≫ Intellivue Mx750 Firmware Version-
   Philips ≫ Intellivue Mx750 Version-
Philips ≫ Intellivue Mx700 Firmware Version-
   Philips ≫ Intellivue Mx700 Version-
Philips ≫ Intellivue Mx600 Firmware Version-
   Philips ≫ Intellivue Mx600 Version-
Philips ≫ Intellivue Mx550 Firmware Version-
   Philips ≫ Intellivue Mx550 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.06% 0.165
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 6.1 6.5 6.9
AV:A/AC:L/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01
Third Party Advisory
US Government Resource