PT-2020-14823 · Philips · Patient Information Center Ix

Published 2020-09-11 · Updated 2023-12-12 · CVE-2020-16224

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Patient Information Center iX (PICiX) versions C.02, C.03

Description The software incorrectly handles a length field that is inconsistent with the actual length of the associated data, causing the application to restart. This occurs when the software parses a formatted message or structure.

Recommendations For Patient Information Center iX (PICiX) versions C.02, C.03, consider implementing input validation to ensure that length fields are consistent with the actual length of the associated data to prevent the application from restarting. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-130

Related Identifiers

CVE-2020-16224

Affected Products

Patient Information Center Ix

References · 5

• https://osv.dev/vulnerability/CVE-2020-16224 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-16224 · Security Note
• https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01 · Note
• https://t.me/cvenotify/63352 · Telegram Post
• https://philips.com/productsecurity · Note