Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, PerformanceBridge Focal Point Version A.01, IntelliVue patient monitors MX100, MX400-MX850, and MP2-MP90 Versions N and prior, IntelliVue X3 and X2 Versions N and prior. The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is then used as a webpage and served to other users. Successful exploitation could lead to unauthorized access to patient data via a read-only web application.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16218
Reference (s):
- https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01
- URL: https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01