nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2020-16218 CVE-2020-16218
LOW
Philips Patient Monitoring Devices Cross-site Scripting
Record summary
CVE-2020-16218 has a selected CVSS score of 3.5 (low).
Description
In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is then used as a webpage and served to other users. Successful exploitation could lead to unauthorized access to patient data via a read-only web application.
Description source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Patient Information Center iX (PICiX)Browse Philips / Patient Information Center iX (PICiX)Default status: unaffected | CVE List | B.02 | affected |
| C.02 | affected | ||
| C.03 | affected |
References
3us-cert.cisa.gov
https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01 philips.com
https://www.philips.com/productsecurity