{"id":"CVE-2020-16216","aliases":["EUVD-2020-8182","GHSA-r3cv-8v59-5mh6"],"status":"published","title":"Philips Patient Monitoring Devices Improper Input Validation","description":"In IntelliVue patient monitors MX100, MX400-550, MX600, MX700, MX750, \nMX800, MX850, MP2-MP90, and IntelliVue X2 and X3 Versions N and prior, \nthe product receives input or data but does not validate or incorrectly \nvalidates that the input has the properties required to process the data\n safely and correctly, which can induce a denial-of-service condition \nthrough a system restart.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00698,"percentile":0.53439,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2020-09-11T13:06:55Z","modified":"2026-06-17T02:57:52Z","products":[{"vendor":"philips","product":"intellivue"},{"vendor":"philips","product":"intellivue patient monitors"},{"vendor":"philips","product":"intellivue_mp2-mp90_firmware"},{"vendor":"philips","product":"intellivue_mx100_firmware"},{"vendor":"philips","product":"intellivue_mx400_firmware"},{"vendor":"philips","product":"intellivue_mx550_firmware"},{"vendor":"philips","product":"intellivue_mx600_firmware"},{"vendor":"philips","product":"intellivue_mx700_firmware"},{"vendor":"philips","product":"intellivue_mx750_firmware"},{"vendor":"philips","product":"intellivue_mx800_firmware"},{"vendor":"philips","product":"intellivue_mx850_firmware"},{"vendor":"philips","product":"intellivue_x2_firmware"},{"vendor":"philips","product":"intellivue_x3_firmware"},{"vendor":"philips","product":"patient_information_center_ix"},{"vendor":"philips","product":"performancebridge_focal_point"}],"references":[{"url":"https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://www.philips.com/productsecurity","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-16216"},{"url":"https://github.com/advisories/GHSA-r3cv-8v59-5mh6"}],"sources":{"cve":[{"id":"CVE-2020-16216","title":"Philips Patient Monitoring Devices Improper Input Validation","description":"In IntelliVue patient monitors MX100, MX400-550, MX600, MX700, MX750, \nMX800, MX850, MP2-MP90, and IntelliVue X2 and X3 Versions N and prior, \nthe product receives input or data but does not validate or incorrectly \nvalidates that the input has the properties required to process the data\n safely and correctly, which can induce a denial-of-service condition \nthrough a system restart.","status":"published","published":"2020-09-11T13:06:55Z","modified":"2024-08-04T13:37:54.166Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:59.116379Z"}],"euvd":[{"id":"EUVD-2020-8182","description":"In IntelliVue patient monitors MX100, MX400-550, MX600, MX700, MX750, \nMX800, MX850, MP2-MP90, and IntelliVue X2 and X3 Versions N and prior, \nthe product receives input or data but does not validate or incorrectly \nvalidates that the input has the properties required to process the data\n safely and correctly, which can induce a denial-of-service condition \nthrough a system restart.","status":"published","published":"2020-09-11T13:06:55Z","modified":"2024-08-04T13:37:54Z","updated_at":"2026-11-03T03:07:28.673063Z"}],"ghsa":[{"id":"GHSA-r3cv-8v59-5mh6","title":"Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, PerformanceBridge Focal Point...","description":"Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, PerformanceBridge Focal Point Version A.01, IntelliVue patient monitors MX100, MX400-MX850, and MP2-MP90 Versions N and prior, IntelliVue X3 and X2 Versions N and prior. The product receives input or data but does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly, which can induce a denial-of-service condition through a system restart.","status":"published","published":"2022-05-24T17:28:05Z","modified":"2023-12-21T05:05:14Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:55:15.236949Z"}],"nvd":[{"id":"CVE-2020-16216","description":"In IntelliVue patient monitors MX100, MX400-550, MX600, MX700, MX750, \nMX800, MX850, MP2-MP90, and IntelliVue X2 and X3 Versions N and prior, \nthe product receives input or data but does not validate or incorrectly \nvalidates that the input has the properties required to process the data\n safely and correctly, which can induce a denial-of-service condition \nthrough a system restart.","status":"published","published":"2020-09-11T14:15:11.44Z","modified":"2026-06-17T02:57:52.513Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":6.1,"vector":"AV:A/AC:L/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:06:14.981587Z"}]}}