CVE-2020-16222

Philips Patient Monitoring Devices Improper Authentication

EPSS 0.6%CWE-287

In Patient Information Center iX (PICiX) Version B.02, C.02, C.03, and PerformanceBridge Focal Point Version A.01, when an actor claims to have a given identity, the software does not prove or insufficiently proves the claim is correct.

Produtos afetados

Philips · Patient Information Center iX (PICiX)Philips · PerformanceBridge Focal Point

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01 https://www.philips.com/productsecurity