First published: Mon Dec 27 2021(Updated: )
IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) contains hard-coded credentials, such as a password or a cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
Credit: ics-cert@hq.dhs.gov
Affected Software | Affected Version | How to fix |
---|---|---|
Philips Intellibridge Ec40 Firmware | <=c.00.04 | |
Philips IntelliBridge EC40 | ||
Philips Intellibridge Ec80 Firmware | <=c.00.04 | |
Philips Intellibridge Ec80 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-32993 is a vulnerability found in the IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) that contains hard-coded credentials, such as a password or a cryptographic key.
CVE-2021-32993 has a severity value of 8.8, which is classified as high.
CVE-2021-32993 affects the Philips Intellibridge Ec40 Firmware versions up to and including c.00.04 and the Philips Intellibridge Ec80 Firmware versions up to and including c.00.04.
The hard-coded credentials in CVE-2021-32993 are used for inbound authentication, outbound communication to external components, or encryption of internal data.
You can find more information about CVE-2021-32993 at the following reference: https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-01