CVE-2020-16228: philips intellivue_mp2-mp90_firmware
Vulnerability summary
CVE-2020-16228 is a medium (CVSS 6.4) vulnerability in philips intellivue_mp2-mp90_firmware. EPSS estimates a 0.37% chance of exploitation in the next 30 days, higher than 29.2% of scored vulnerabilities.
Timeline
- 11-09-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
In Patient Information Center iX (PICiX) Versions C.02 and C.03, PerformanceBridge Focal Point Version A.01, IntelliVue patient monitors MX100, MX400-MX550, MX750, MX850, and IntelliVue X3 Versions N and prior, the software does not check or incorrectly checks the revocation status of a certificate, which may cause it to use a compromised certificate.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.37%
Chance of exploitation in the next 30 days
Percentile
29%
Versus all other CVEs
30-day change
0.00 pp
From 0.37% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
1 vendor · 15 products
References
2 links
us-cert.cisa.gov/ics/advisories/icsma-20-254-01X Refsource MISCThird Party AdvisoryUS Government Resource