Approved changes feed: RSS · Atom

cpe:2.3:a:philips:patient_information_center_ix:b.02:*:*:*:*:*:*:*

part: a version: b.02 update: *

VendorPhilips (b8a9f1cf-d82f-5e30-aade-8a8018bb7a6f)
ProductPatient Information Center Ix (52758c44-d400-5bf9-bc57-a978a41dc804)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-43552 vulnerable 2026-06-08 05:36:43.541759 Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of Hard-coded Cryptographic Key
MEDIUM (6.1)
The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from the Patient Information Center iX (PIC iX) Versions B.02, C.02, and C.03.
Published: 2021-12-27T18:48:22.163Z
Updated: 2024-09-17T00:16:34.580Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-16228 vulnerable 2026-06-08 05:19:27.756517 Philips Patient Monitoring Devices Improper Check for Certificate Revocation
In Patient Information Center iX (PICiX) Versions C.02 and C.03, PerformanceBridge Focal Point Version A.01, IntelliVue patient monitors MX100, MX400-MX550, MX750, MX850, and IntelliVue X3 Versions N and prior, the software does not check or incorrectly checks the revocation status of a certificate, which may cause it to use a compromised certificate.
Published: 2020-09-11T12:58:13.000Z
Updated: 2024-08-04T13:37:54.179Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-16222 vulnerable 2026-06-08 05:19:27.588021 Philips Patient Monitoring Devices Improper Authentication
In Patient Information Center iX (PICiX) Version B.02, C.02, C.03, and PerformanceBridge Focal Point Version A.01, when an actor claims to have a given identity, the software does not prove or insufficiently proves the claim is correct.
Published: 2020-09-11T12:55:23.000Z
Updated: 2024-08-04T13:37:54.092Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-16220 vulnerable 2026-06-08 05:19:27.586986 Philips Patient Monitoring Devices Improper Validation of Syntactic Correctness of Input
In Patient Information Center iX (PICiX) Versions C.02, C.03, PerformanceBridge Focal Point Version A.01, the product receives input that is expected to be well-formed (i.e., to comply with a certain syntax) but it does not validate or incorrectly validates that the input complies with the syntax, causing the certificate enrollment service to crash. It does not impact monitoring but prevents new devices from enrolling.
Published: 2020-09-11T13:11:22.000Z
Updated: 2024-08-04T13:37:53.493Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-16218 vulnerable 2026-06-08 05:19:27.582559 Philips Patient Monitoring Devices Cross-site Scripting
In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is then used as a webpage and served to other users. Successful exploitation could lead to unauthorized access to patient data via a read-only web application.
Published: 2020-09-11T12:50:08.000Z
Updated: 2024-08-04T13:37:54.157Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-16216 vulnerable 2026-06-08 05:19:27.562983 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-16214 vulnerable 2026-06-08 05:19:27.559073 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-16212 vulnerable 2026-06-08 05:19:27.557010 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.