CVE-2020-16212: falha em Philips Patient Information Center iX (PICiX)
Philips Patient Monitoring Devices Exposure of Resource to Wrong Sphere
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.4%
In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource. The application on the surveillance station operates in kiosk mode, which is vulnerable to local breakouts that could allow an attacker with physical access to escape the restricted environment with limited privileges.
Produtos afetados
Philips · Patient Information Center iX (PICiX)CVEs relacionadas — Philips Patient Information Center iX (PICiX)
No mesmo produto, das mais perigosas para as menos.
CVE-2020-16218—Philips Patient Monitoring Devices Cross-site ScriptingEPSS 0.7%CVE-2020-16224—Philips Patient Monitoring Devices Improper Handling of Length Parameter InconsistencyEPSS 0.6%CVE-2020-16214—Philips Patient Monitoring Devices Improper Neutralization of Formula Elements in a CSV FileEPSS 0.6%CVE-2020-16222—Philips Patient Monitoring Devices Improper AuthenticationEPSS 0.5%CVE-2020-16228—Philips Patient Monitoring Devices Improper Check for Certificate RevocationEPSS 0.4%CVE-2020-16220—Philips Patient Monitoring Devices Improper Validation of Syntactic Correctness of InputEPSS 0.3%