CVE-2021-43550mediumCWE-327

CVE-2021-43550: medium-severity vulnerability in Philips Patient Information Center iX (PIC iX)

Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of a Broken or Risky Cryptographic Algorithm

Published · Updated

Follow this CVE+ Monitor Patient Information Center iX+ Monitor Efficia CM Series

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.9epss 0.2%
The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information, which affects the communications between Patient Information Center iX (PIC iX) Versions C.02 and C.03 and Efficia CM Series Revisions A.01 to C.0x and 4.0.
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
Affected products
Philips · Efficia CM SeriesPhilips · Patient Information Center iX (PIC iX)
Related CVEs — Philips Patient Information Center iX (PIC iX)

In the same product, most dangerous first.

CVE-2021-43548MEDIUMPhilips Patient Information Center iX (PIC iX) and Efficia CM Series Improper Input ValidationEPSS 0.4%CVE-2021-43552MEDIUMPhilips Patient Information Center iX (PIC iX) and Efficia CM Series Use of Hard-coded Cryptographic KeyEPSS 0.2%