Skip to content
OpenAdvisories
Medium ICSMA-21-322-02 3 CVEs

Philips Patient Information Center iX (PIC iX) and Efficia CM Series

Published Nov 18, 2021 · Updated Nov 18, 2021

Vendor: Philips Product: Efficia CM Series Product: Patient Information Center iX (PIC iX)

Summary

Successful exploitation of these vulnerabilities may allow an attacker unauthorized access to data (including patient data) and create a denial of service resulting in temporary interruption of viewing physiological data at the central station. Exploitation does not enable modification or change to point-of-care devices.

Vulnerabilities 3

  • Medium 6.5
    CVE-2021-43548

    Philips Patient Information Center iX (PIC iX) and Efficia CM Series Improper Input Validation

    Patient Information Center iX (PIC iX) Versions C.02 and C.03 receives input or data, but does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.

    Philips Patient Information Center iX (PIC iX)
  • Medium 6.1
    CVE-2021-43552

    Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of Hard-coded Cryptographic Key

    The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from the Patient Information Center iX (PIC iX) Versions B.02, C.02, and C.03.

    Philips Patient Information Center iX (PIC iX)
  • Medium 5.9
    CVE-2021-43550

    Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of a Broken or Risky Cryptographic Algorithm

    The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information, which affects the communications between Patient Information Center iX (PIC iX) Versions C.02 and C.03 and Efficia CM Series …

    Philips Patient Information Center iX (PIC iX) Efficia CM Series

Revision history

  1. #1

    ICSMA-21-322-02 Philips Patient Information Center iX (PIC iX) and Efficia CM Series

References