Vulnerability · Published Dec 27, 2021 · Assigned by icscert
CVE-2021-32993Philips IntelliBridge EC 40 and EC 80 Hub Use of Hard-coded Credentials
High 8.1
In plain English
A high-severity hard-coded credentials in IntelliBridge EC 40 Hub from Philips. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).
Severity (CVSS 3.1)8.1High
Exploit odds (30 days)0.3%top 78.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) contains hard-coded credentials, such as a password or a cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Philips | IntelliBridge EC 40 Hub | unspecified – through C.00.04 |
| Philips | IntelliBridge EC 80 Hub | unspecified – through C.00.04 |
Weakness: CWE-798 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
References
- https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-01 x_refsource_MISC