Patient Information Center Ix (Picix)

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:philips:patient_information_center_ix_(picix):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPhilips (b8a9f1cf-d82f-5e30-aade-8a8018bb7a6f)
ProductPatient Information Center Ix (Picix) (e961ba99-2283-5a18-b74b-6fc3a9ca45db)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-16228 vulnerable 2026-06-08 05:19:27.754467 Philips Patient Monitoring Devices Improper Check for Certificate Revocation
In Patient Information Center iX (PICiX) Versions C.02 and C.03, PerformanceBridge Focal Point Version A.01, IntelliVue patient monitors MX100, MX400-MX550, MX750, MX850, and IntelliVue X3 Versions N and prior, the software does not check or incorrectly checks the revocation status of a certificate, which may cause it to use a compromised certificate.
Published: 2020-09-11T12:58:13.000Z
Updated: 2024-08-04T13:37:54.179Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-16224 vulnerable 2026-06-08 05:19:27.588824 Philips Patient Monitoring Devices Improper Handling of Length Parameter Inconsistency
In Patient Information Center iX (PICiX) Versions C.02, C.03, the software parses a formatted message or structure but does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data, causing the application on the surveillance station to restart.
Published: 2020-09-11T13:05:19.000Z
Updated: 2024-08-04T13:37:53.948Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-16222 vulnerable 2026-06-08 05:19:27.587963 Philips Patient Monitoring Devices Improper Authentication
In Patient Information Center iX (PICiX) Version B.02, C.02, C.03, and PerformanceBridge Focal Point Version A.01, when an actor claims to have a given identity, the software does not prove or insufficiently proves the claim is correct.
Published: 2020-09-11T12:55:23.000Z
Updated: 2024-08-04T13:37:54.092Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-16220 vulnerable 2026-06-08 05:19:27.585895 Philips Patient Monitoring Devices Improper Validation of Syntactic Correctness of Input
In Patient Information Center iX (PICiX) Versions C.02, C.03, PerformanceBridge Focal Point Version A.01, the product receives input that is expected to be well-formed (i.e., to comply with a certain syntax) but it does not validate or incorrectly validates that the input complies with the syntax, causing the certificate enrollment service to crash. It does not impact monitoring but prevents new devices from enrolling.
Published: 2020-09-11T13:11:22.000Z
Updated: 2024-08-04T13:37:53.493Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-16218 vulnerable 2026-06-08 05:19:27.582521 Philips Patient Monitoring Devices Cross-site Scripting
In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is then used as a webpage and served to other users. Successful exploitation could lead to unauthorized access to patient data via a read-only web application.
Published: 2020-09-11T12:50:08.000Z
Updated: 2024-08-04T13:37:54.157Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-16214 vulnerable 2026-06-08 05:19:27.559039 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-16212 vulnerable 2026-06-08 05:19:27.556142 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.