CVE-2020-16212
Philips Patient Monitoring Devices Exposure of Resource to Wrong Sphere
- State
- Published
- Severity
- Not scored
- Published
- Sep 11, 2020
- Updated
- Aug 4, 2024
- Reserved
- Jul 31, 2020
Description
In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource. The application on the surveillance station operates in kiosk mode, which is vulnerable to local breakouts that could allow an attacker with physical access to escape the restricted environment with limited privileges.
Scores
The record has no CVSS score.
Weaknesses
- CWE-668 Exposure of Resource to Wrong Sphere
Affected Products
| Product | Versions |
|---|---|
Patient Information Center iX (PICiX)Philips |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.