CVE-2021-33017highCWE-288

CVE-2021-33017: high-severity vulnerability in Philips IntelliBridge EC 40 Hub

Philips IntelliBridge EC 40 and EC 80 Hub Authentication Bypass Using an Alternate Path or Channel

Published · Updated

Follow this CVE+ Monitor IntelliBridge EC 40 Hub+ Monitor IntelliBridge EC 80 Hub

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.1epss 0.5%
The standard access path of the IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) requires authentication, but the product has an alternate path or channel that does not require authentication.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Affected products
Philips · IntelliBridge EC 40 HubPhilips · IntelliBridge EC 80 Hub
Related CVEs — Philips IntelliBridge EC 40 Hub

In the same product, most dangerous first.

CVE-2021-32993HIGHPhilips IntelliBridge EC 40 and EC 80 Hub Use of Hard-coded CredentialsEPSS 0.3%