HIGH🇵🇱 Wersja polska

CVE-2020-16222

CVSS 8.8v3.1pub. 2020-09-11upd. 2026-02-23

In Patient Information Center iX (PICiX) Version B.02, C.02, C.03, and PerformanceBridge Focal Point Version A.01, when an actor claims to have a given identity, the software does not prove or insufficiently proves the claim is correct.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Philips Patient Information Center Ix

    APP
    Philips
    b.02c.02c.03

  • Philips Performancebridge Focal Point

    APP
    Philips
    a.01
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2021-43552MEDIUM6.1ten sam produkt

The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recove...

CVE-2021-43548MEDIUM6.5ten sam produkt

Patient Information Center iX (PIC iX) Versions C.02 and C.03 receives input or data, but does not validate or...

CVE-2021-43550MEDIUM5.9ten sam produkt

The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of...

CVE-2020-16220MEDIUM4.3ten sam produkt

In Patient Information Center iX (PICiX) Versions C.02, C.03, PerformanceBridge Focal Point Version A.01, the...

CVE-2020-16212MEDIUM6.8ten sam produkt

In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the product exposes a resource to the wron...