← CVE Intelligence

CVE-2020-16214

Philips Patient Monitoring Devices Improper Neutralization of Formula Elements in a CSV File PUBLISHED

Description (CNA)

In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the software saves user-provided information into a comma-separated value (CSV) file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by spreadsheet software.

Affected (CNA)

Vendor / productVersions
Philips / Patient Information Center iX (PICiX)affected B.02; affected C.02; affected C.03

CWE

CWE-1236

References

ADP enrichment

CVE

No English description supplied.