Vulnerability · Published Dec 27, 2021 · Assigned by icscert
CVE-2021-43550Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of a Broken or Risky Cryptographic Algorithm
Medium 5.9
In plain English
A medium-severity broken cryptography in Efficia CM Series from Philips. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).
Severity (CVSS 3.1)5.9Medium
Exploit odds (30 days)0.2%top 85.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information, which affects the communications between Patient Information Center iX (PIC iX) Versions C.02 and C.03 and Efficia CM Series Revisions A.01 to C.0x and 4.0.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Philips | Efficia CM Series | 4.0A.01 – through C.0x |
| Philips | Patient Information Center iX (PIC iX) | C.02C.03 |
Weakness: CWE-327 · Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
References
- https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-02 x_refsource_MISC