CVE-2020-16200— Philips Clinical Collaboration Platform Algorithm Downgrade
Quick assessment
Affected
Philips Clinical Collaboration Platform
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Clinical Collaboration Platform是荷兰飞利浦（Philips）的一个临床医疗协作平台 Clinical Collaboration Platform 12.2.1及以上版本中存在安全漏洞。该漏洞源于软件没有正确地控制有限资源的分配和维护，从而使攻击者能够影响资源的消耗，最终导致可用资源的耗尽。
Possible ATT&CK Techniques 1 AI
T1496 · Resource Hijacking
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2020-16200
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Philips Clinical Collaboration Platform Algorithm Downgrade
Source: CVE Program / CVE List V5
Vulnerability Description
Philips Clinical Collaboration Platform, Versions 12.2.1 and prior,
does not properly control the allocation and maintenance of a limited
resource, thereby enabling an attacker to influence the amount of
resources consumed, eventually leading to the exhaustion of available
resources.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
在会话协商时选择低安全性的算法(算法降级)
Source: CVE Program / CVE List V5
Vulnerability Title
Philips Clinical Collaboration Platform 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Clinical Collaboration Platform是荷兰飞利浦（Philips）的一个临床医疗协作平台 Clinical Collaboration Platform 12.2.1及以上版本中存在安全漏洞。该漏洞源于软件没有正确地控制有限资源的分配和维护，从而使攻击者能够影响资源的消耗，最终导致可用资源的耗尽。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Philips | Clinical Collaboration Platform | 0 ~ 12.2.1 | - |
|
II. Public POCs for CVE-2020-16200
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-16200
请登录查看更多情报信息。
Vendor Advisories for CVE-2020-16200 (1)
-
https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01 x_refsource_MISC
Same Patch Batch · Philips · 2020-09-18 · 5 CVEs total
| CVE-2020-16247 | 6.8 MEDIUM | Philips Clinical Collaboration Platform Configuration |
| CVE-2020-16198 | 5.0 MEDIUM | Philips Clinical Collaboration Platform Protection Mechanism Failure |
| CVE-2020-14525 | 3.5 LOW | Philips Clinical Collaboration Platform Improper Neutralization of Script in Attributes in |
| CVE-2020-14506 | 3.4 LOW | Philips Clinical Collaboration Platform Cross-site Request Forgery |
IV. Related Vulnerabilities
Same product: Clinical Collaboration Platform
Same vendor: Philips
-
CVE-2026-3562
Philips Hue Bridge hk_hap Ed25519 Signature Verification Aut -
CVE-2026-3561
Philips Hue Bridge hk_hap characteristics Heap-based Buffer -
CVE-2026-3560
Philips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-base -
CVE-2026-3559
Philips Hue Bridge HomeKit Accessory Protocol Static Nonce A -
CVE-2026-3558
Philips Hue Bridge HomeKit Accessory Protocol Transient Pair
Same weakness: CWE-757
-
CVE-2026-89177
Howyar｜WeenyGenius - Use of Insecure Protocol -
CVE-2026-72887
Net::OAuth::Client versions before 0.32 for Perl allow the s -
CVE-2026-18691
Improper Authentication in MongoDB Intra-Cluster Connections -
CVE-2026-55953
TLS 1.2 and DTLS client accepts unoffered anonymous cipher s -
CVE-2026-4942
IBM i is Affected by Algorithm Downgrade in Transport Layer
V. Comments for CVE-2020-16200
No comments yet