CVE-2020-16228: Philips Intellivue MP2-MP90 Firmware

Medium severity, CVSS 6.4. EPSS: 0.4% chance of exploitation in the next 30 days.

In Patient Information Center iX (PICiX) Versions C.02 and C.03, PerformanceBridge Focal Point Version A.01, IntelliVue patient monitors MX100, MX400-MX550, MX750, MX850, and IntelliVue X3 Versions N and prior, the software does not check or incorrectly checks the revocation status of a certificate, which may cause it to use a compromised certificate.

Affected products

• Philips Intellivue MP2-MP90 Firmware: affected versions not specified
• Philips Intellivue MX100 Firmware: affected versions not specified
• Philips Intellivue MX400 Firmware: affected versions not specified
• Philips Intellivue MX550 Firmware: affected versions not specified
• Philips Intellivue MX600 Firmware: affected versions not specified
• Philips Intellivue MX700 Firmware: affected versions not specified
• Philips Intellivue MX750 Firmware: affected versions not specified
• Philips Intellivue MX800 Firmware: affected versions not specified
• Philips Intellivue MX850 Firmware: affected versions not specified
• Philips Intellivue x2 Firmware: affected versions not specified
• Philips Intellivue x3 Firmware: affected versions not specified
• Philips Patient Information Center Ix: version b.02 only; version c.02 only; version c.03 only
• Philips Performancebridge Focal Point: version a.01 only

Published 2020-09-11. Last modified 2026-06-17.