--- title: "Philips patient information center ix vulnerabilities and CVEs" url: https://radicalnotion.ai/vendor/philips/patient-information-center-ix type: product description: "Philips patient information center ix has 11 published CVEs, 0 in CISA KEV and 0 with public exploits." updated: 2021-12-27 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # Philips patient information center ix vulnerabilities Vendor: [Philips](https://radicalnotion.ai/vendor/philips) - **Published CVEs:** 11 - **In CISA KEV:** 0 - **With a public exploit:** 0 - **With a patch:** 8 - **Average CVSS:** 6.1 - **First CVE:** 2020-09-11 - **Latest CVE:** 2021-12-27 ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 0 | | High | 1 | | Medium | 9 | | Low | 1 | | Unscored | 0 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 2 | | [CWE-1286](https://radicalnotion.ai/cwe/cwe-1286) | Improper Validation of Syntactic Correctness of Input | 1 | | [CWE-130](https://radicalnotion.ai/cwe/cwe-130) | Improper Handling of Length Parameter Inconsistency | 1 | | [CWE-287](https://radicalnotion.ai/cwe/cwe-287) | Improper Authentication | 1 | | [CWE-299](https://radicalnotion.ai/cwe/cwe-299) | Improper Check for Certificate Revocation | 1 | | [CWE-321](https://radicalnotion.ai/cwe/cwe-321) | Use of Hard-coded Cryptographic Key | 1 | | [CWE-327](https://radicalnotion.ai/cwe/cwe-327) | Use of a Broken or Risky Cryptographic Algorithm | 1 | | [CWE-668](https://radicalnotion.ai/cwe/cwe-668) | Exposure of Resource to Wrong Sphere | 1 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2020 | 8 | | 2021 | 3 | ## Affected versions | Version | Kind | CVEs | | --- | --- | --- | | c.02 | range | 11 | | c.03 | range | 11 | | b.02 | range | 8 | ## CVEs | CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch | | --- | --- | --- | --- | --- | --- | --- | | CVE-2021-43550 | Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of a Broken or Risky Cryptographic Algorithm | medium | 6.5 | No | No | No | | CVE-2021-43548 | Philips Patient Information Center iX (PIC iX) and Efficia CM Series Improper Input Validation | medium | 6.5 | No | No | No | | CVE-2021-43552 | Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of Hard-coded Cryptographic Key | medium | 6.1 | No | No | No | | CVE-2020-16212 | Philips Patient Monitoring Devices Exposure of Resource to Wrong Sphere | medium | 6.8 | No | No | Yes | | CVE-2020-16220 | Philips Patient Monitoring Devices Improper Validation of Syntactic Correctness of Input | medium | 4.3 | No | No | Yes | | CVE-2020-16216 | Philips Patient Monitoring Devices Improper Input Validation | medium | 6.5 | No | No | Yes | | CVE-2020-16224 | Philips Patient Monitoring Devices Improper Handling of Length Parameter Inconsistency | medium | 6.5 | No | No | Yes | | CVE-2020-16228 | Philips Patient Monitoring Devices Improper Check for Certificate Revocation | medium | 6.4 | No | No | Yes | | CVE-2020-16222 | Philips Patient Monitoring Devices Improper Authentication | high | 8.8 | No | No | Yes | | CVE-2020-16214 | Philips Patient Monitoring Devices Improper Neutralization of Formula Elements in a CSV File | medium | 5.0 | No | No | Yes | | CVE-2020-16218 | Philips Patient Monitoring Devices Cross-site Scripting | low | 3.5 | No | No | Yes | ## Frequently asked questions ### How many CVEs does Philips patient information center ix have? Philips patient information center ix has 11 published CVE records since 2020. ### How many Philips patient information center ix CVEs are in CISA KEV? None of Philips patient information center ix's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog. ### Are there public exploits for Philips patient information center ix vulnerabilities? No Philips patient information center ix CVEs currently have a tracked public exploit in this dataset. ### Which versions of Philips patient information center ix are affected? 3 distinct Philips patient information center ix versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version. ### What are the most common weakness types in Philips patient information center ix CVEs? Philips patient information center ix's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-1286 (Improper Validation of Syntactic Correctness of Input), CWE-130 (Improper Handling of Length Parameter Inconsistency), CWE-287 (Improper Authentication). ### What is the average severity of Philips patient information center ix CVEs? The average CVSS base score across Philips patient information center ix's scored CVEs is 6.1. ## Other products from this vendor - [IntelliSpace Portal](https://radicalnotion.ai/vendor/philips/intellispace-portal) (14 CVEs) - [e-alert firmware](https://radicalnotion.ai/vendor/philips/e-alert-firmware) (10 CVEs) - [e-Alert Unit (non-medical device)](https://radicalnotion.ai/vendor/philips/e-alert-unit-non-medical-device) (9 CVEs) - [hue bridge v2](https://radicalnotion.ai/vendor/philips/hue-bridge-v2) (9 CVEs) - [hue bridge v2 firmware](https://radicalnotion.ai/vendor/philips/hue-bridge-v2-firmware) (9 CVEs) - [Philips IntelliSpace Portal](https://radicalnotion.ai/vendor/philips/philips-intellispace-portal) (9 CVEs) - [Vue PACS](https://radicalnotion.ai/vendor/philips/vue-pacs) (9 CVEs) - [Clinical Collaboration Platform](https://radicalnotion.ai/vendor/philips/clinical-collaboration-platform) (8 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/philips/patient-information-center-ix). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.