CVE-2021-32993highCWE-798

CVE-2021-32993: high-severity vulnerability in Philips IntelliBridge EC 40 Hub

Philips IntelliBridge EC 40 and EC 80 Hub Use of Hard-coded Credentials

Published · Updated

Follow this CVE+ Monitor IntelliBridge EC 40 Hub+ Monitor IntelliBridge EC 80 Hub

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.1epss 0.3%
IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) contains hard-coded credentials, such as a password or a cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Affected products
Philips · IntelliBridge EC 40 HubPhilips · IntelliBridge EC 80 Hub
Related CVEs — Philips IntelliBridge EC 40 Hub

In the same product, most dangerous first.

CVE-2021-33017HIGHPhilips IntelliBridge EC 40 and EC 80 Hub Authentication Bypass Using an Alternate Path or ChannelEPSS 0.5%