6.4

CVE-2020-16228

In Patient Information Center iX (PICiX) Versions C.02 and C.03, 
PerformanceBridge Focal Point Version A.01, IntelliVue patient monitors 
MX100, MX400-MX550, MX750, MX850, and IntelliVue X3 Versions N and 
prior, the software does not check or incorrectly checks the revocation 
status of a certificate, which may cause it to use a compromised 
certificate.

Data is provided by the National Vulnerability Database (NVD)
Philips ≫ Intellivue Mx100 Firmware Version-
   Philips ≫ Intellivue Mx100 Version-
Philips ≫ Intellivue Mx400 Firmware Version-
   Philips ≫ Intellivue Mx400 Version-
Philips ≫ Intellivue Mx850 Firmware Version-
   Philips ≫ Intellivue Mx850 Version-
Philips ≫ Intellivue X2 Firmware Version-
   Philips ≫ Intellivue X2 Versionn
Philips ≫ Intellivue X3 Firmware Version-
   Philips ≫ Intellivue X3 Versionn
Philips ≫ Intellivue Mx800 Firmware Version-
   Philips ≫ Intellivue Mx800 Version-
Philips ≫ Intellivue Mx750 Firmware Version-
   Philips ≫ Intellivue Mx750 Version-
Philips ≫ Intellivue Mx700 Firmware Version-
   Philips ≫ Intellivue Mx700 Version-
Philips ≫ Intellivue Mx600 Firmware Version-
   Philips ≫ Intellivue Mx600 Version-
Philips ≫ Intellivue Mx550 Firmware Version-
   Philips ≫ Intellivue Mx550 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.069
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.4 0.9 5.5
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
nvd@nist.gov 5.2 5.1 6.4
AV:A/AC:L/Au:S/C:P/I:P/A:P
CWE-299 Improper Check for Certificate Revocation

The product does not check or incorrectly checks the revocation status of a certificate, which may cause it to use a certificate that has been compromised.

https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01
Third Party Advisory
US Government Resource