PT-2020-14823 · Philips · Patient Information Center Ix

CVE-2020-16224

·

Published

2020-09-11

·

Updated

2023-12-12

CVSS v3.1

6.5

Medium

VectorAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Patient Information Center iX (PICiX) versions C.02, C.03
Description The software incorrectly handles a length field that is inconsistent with the actual length of the associated data, causing the application to restart. This occurs when the software parses a formatted message or structure.
Recommendations For Patient Information Center iX (PICiX) versions C.02, C.03, consider implementing input validation to ensure that length fields are consistent with the actual length of the associated data to prevent the application from restarting. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2020-16224

Affected Products

Patient Information Center Ix