CVE-2020-16224

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-16224

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

3.3 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:A/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 6.5 / Impact : 2.9

Access Vector ADJACENT_NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

I

n Patient Information Center iX (PICiX) Versions C.02, C.03, the software parses a formatted message or structure but does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data, causing the application on the surveillance station to restart.

References
Link Resource
https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01 Third Party Advisory US Government Resource
https://www.philips.com/productsecurity
https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01 Third Party Advisory US Government Resource
https://www.philips.com/productsecurity
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:philips:patient_information_center_ix:c.02:*:*:*:*:*:*:*
cpe:2.3:a:philips:patient_information_center_ix:c.03:*:*:*:*:*:*:*
History

23 Feb 2026, 18:20

Type Values Removed Values Added
Summary (en) In Patient Information Center iX (PICiX) Versions C.02, C.03, the software parses a formatted message or structure but does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data, causing the application on the surveillance station to restart. (en) In Patient Information Center iX (PICiX) Versions C.02, C.03, the software parses a formatted message or structure but does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data, causing the application on the surveillance station to restart.

21 Nov 2024, 05:06

Type Values Removed Values Added
References () https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01 - Third Party Advisory, US Government Resource () https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01 - Third Party Advisory, US Government Resource
References () https://www.philips.com/productsecurity - () https://www.philips.com/productsecurity -
Information

Published : 2020-09-11 14:15

Updated : 2026-02-23 18:20

NVD link : CVE-2020-16224

Mitre link : CVE-2020-16224

CVE.ORG link : CVE-2020-16224

JSON object : View

Products Affected

philips

CWE
CWE-130

Improper Handling of Length Parameter Inconsistency