CVE-2020-16222

HIGH

Philips Patient Information Center iX and PerformanceBridge Focal Point - Improper Authentication

Title source: llm

Description

In Patient Information Center iX (PICiX) Version B.02, C.02, C.03, and PerformanceBridge Focal Point Version A.01, when an actor claims to have a given identity, the software does not prove or insufficiently proves the claim is correct.

References (2)

Core 2

Core References

Various Sources

https://www.philips.com/productsecurity

Third Party Advisory, US Government Resource x_refsource_misc

https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01

Scores

CVSS v3 8.8

EPSS 0.0055

EPSS Percentile 42.0%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-287

Status published

Products (4)

philips/patient_information_center_ix b.02

philips/patient_information_center_ix c.02

philips/patient_information_center_ix c.03

philips/performancebridge_focal_point a.01

Published Sep 11, 2020

Tracked Since Feb 18, 2026