CVE-2021-43550mediumCWE-327

CVE-2021-43550: falha de média gravidade em Philips Patient Information Center iX (PIC iX)

Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of a Broken or Risky Cryptographic Algorithm

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Patient Information Center iX+ Monitorar Efficia CM Series

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.9epss 0.2%
The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information, which affects the communications between Patient Information Center iX (PIC iX) Versions C.02 and C.03 and Efficia CM Series Revisions A.01 to C.0x and 4.0.
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
Produtos afetados
Philips · Efficia CM SeriesPhilips · Patient Information Center iX (PIC iX)
CVEs relacionadas — Philips Patient Information Center iX (PIC iX)

No mesmo produto, das mais perigosas para as menos.

CVE-2021-43548MEDIUMPhilips Patient Information Center iX (PIC iX) and Efficia CM Series Improper Input ValidationEPSS 0.4%CVE-2021-43552MEDIUMPhilips Patient Information Center iX (PIC iX) and Efficia CM Series Use of Hard-coded Cryptographic KeyEPSS 0.2%