CVE Vulnerabilities

CVE-2020-16214

Improper Neutralization of Formula Elements in a CSV File

Published: Sep 11, 2020 | Modified: Dec 12, 2023
CVSS 3.x
5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.x
5.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the software saves user-provided information into a comma-separated value (CSV) file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by spreadsheet software.

Weakness

The product saves user-provided information into a Comma-Separated Value (CSV) file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by a spreadsheet product.

Affected Software

Name Vendor Start Version End Version
Patient_information_center_ix Philips b.02 (including) b.02 (including)
Patient_information_center_ix Philips c.02 (including) c.02 (including)
Patient_information_center_ix Philips c.03 (including) c.03 (including)

Potential Mitigations

References