Skip to content
OpenAdvisories
High ICSMA-21-322-01 2 CVEs

Philips IntelliBridge EC 40 and EC 80 Hub

Published Nov 18, 2021 · Updated Nov 18, 2021

Vendor: Philips Product: IntelliBridge EC 40 Hub Product: IntelliBridge EC 80 Hub

Summary

Successful exploitation of these vulnerabilities may allow an attacker unauthorized access to the IntelliBridge EC40 and80 Hub. This could allow an attacker to execute software, modify system configurations, or view/update files, including unidentifiable patient data.

Vulnerabilities 2

  • High 8.1
    CVE-2021-32993

    Philips IntelliBridge EC 40 and EC 80 Hub Use of Hard-coded Credentials

    IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) contains hard-coded credentials, such as a password or a cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.

    Philips IntelliBridge EC 80 Hub IntelliBridge EC 40 Hub
  • High 8.1
    CVE-2021-33017

    Philips IntelliBridge EC 40 and EC 80 Hub Authentication Bypass Using an Alternate Path or Channel

    The standard access path of the IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) requires authentication, but the product has an alternate path or channel that does not require authentication.

    Philips IntelliBridge EC 40 Hub IntelliBridge EC 80 Hub

Revision history

  1. #1

    ICSMA-21-322-01 Philips IntelliBridge EC 40 and EC 80 Hub

References