PT-2020-14821 · Philips · Performancebridge Focal Point+1

Published 2020-09-11 · Updated 2023-12-12 · CVE-2020-16222

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Patient Information Center iX (PICiX) versions B.02, C.02, C.03 PerformanceBridge Focal Point version A.01

Description The software does not properly verify the identity of an actor, allowing the claim to be insufficiently proven.

Recommendations For Patient Information Center iX (PICiX) versions B.02, C.02, C.03, consider implementing additional identity verification measures until a patch is available. For PerformanceBridge Focal Point version A.01, consider implementing additional identity verification measures until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2020-16222

Affected Products

Patient Information Center Ix

Performancebridge Focal Point

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-16222 · Security Note
• https://osv.dev/vulnerability/CVE-2020-16222 · Vendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01 · Note
• https://t.me/cvenotify/63348 · Telegram Post
• https://philips.com/productsecurity · Note