CVE-2021-43548mediumCWE-20

CVE-2021-43548: medium-severity vulnerability in Philips Patient Information Center iX (PIC iX)

Philips Patient Information Center iX (PIC iX) and Efficia CM Series Improper Input Validation

Published · Updated

Follow this CVE+ Monitor Patient Information Center iX

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.4%
Patient Information Center iX (PIC iX) Versions C.02 and C.03 receives input or data, but does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Philips · Patient Information Center iX (PIC iX)
Related CVEs — Philips Patient Information Center iX (PIC iX)

In the same product, most dangerous first.

CVE-2021-43550MEDIUMPhilips Patient Information Center iX (PIC iX) and Efficia CM Series Use of a Broken or Risky Cryptographic AlgorithmEPSS 0.2%CVE-2021-43552MEDIUMPhilips Patient Information Center iX (PIC iX) and Efficia CM Series Use of Hard-coded Cryptographic KeyEPSS 0.2%