PT-2020-14815 · Philips · Intellivue X3+9

Published 2020-09-11 · Updated 2023-12-12 · CVE-2020-16216

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IntelliVue patient monitors MX100, MX400-550, MX600, MX700, MX750, MX800, MX850, MP2-MP90, and IntelliVue X2 and X3 Versions N and prior

Description The product receives input or data but does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly, which can induce a denial-of-service condition through a system restart.

Recommendations For IntelliVue patient monitors MX100, MX400-550, MX600, MX700, MX750, MX800, MX850, MP2-MP90, and IntelliVue X2 and X3 Versions N and prior, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2020-16216

Affected Products

Intellivue Mp2-Mp90

Intellivue Mx100

Intellivue Mx400-550

Intellivue Mx600

Intellivue Mx700

Intellivue Mx750

Intellivue Mx800

Intellivue Mx850

Intellivue X2

Intellivue X3

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-16216 · Security Note
• https://osv.dev/vulnerability/CVE-2020-16216 · Vendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01 · Note
• https://t.me/cvenotify/63350 · Telegram Post
• https://philips.com/productsecurity · Note