Is CVE-2020-16228 actively exploited?

No active exploitation of CVE-2020-16228 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2020-16228 be exploited remotely?

Partially. CVE-2020-16228 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2020-16228?

CVE-2020-16228 has a CVSS score of 6.4 (MEDIUM).

HOME VULNERABILITIESCVE-2020-16228

MEDIUM

CVE-2020-16228

CWE-299Published: September 11, 2020· Updated: Jun 17, 2026

6.4

CVSS v3.1

Official Description

In Patient Information Center iX (PICiX) Versions C.02 and C.03,

PerformanceBridge Focal Point Version A.01, IntelliVue patient monitors

MX100, MX400-MX550, MX750, MX850, and IntelliVue X3 Versions N and

prior, the software does not check or incorrectly checks the revocation

status of a certificate, which may cause it to use a compromised

certificate.

NVD Source

Technical Analysis

CVE-2020-16228 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

Exploitation requires high privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), with a CVSS base score of 6.4.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorAdjacent

Attack ComplexityLow

Privileges Req.High

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityLow

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L

Affected Vendors & Products

philips24 product(s)

patient information center ixperformancebridge focal pointintellivue mp2-mp90 firmwareintellivue mp2-mp90intellivue mx100 firmwareintellivue mx100intellivue mx400 firmwareintellivue mx400intellivue mx850 firmwareintellivue mx850intellivue x2 firmwareintellivue x2+12

Source: NVD CPE · 26 total CPE entries