CVE-2019-18241CWE-326

In Philips IntelliBridge EC40 and EC80, IntelliBridge EC40 Hub all versions, and IntelliBridge EC80 Hub all versions, the SSH server running on the affected…

published November 25, 2019

CVSS
—
EPSS
0%
Percentile
24.7
In the wild
Unconfirmed
What it is

In Philips IntelliBridge EC40 and EC80, IntelliBridge EC40 Hub all versions, and IntelliBridge EC80 Hub all versions, the SSH server running on the affected products is configured to allow weak ciphers. This could enable an unauthorized attacker with access to the network to capture and replay the session and gain unauthorized access to the EC40/80 hub.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00328 · 24.7th percentile
Weakness
CWE-326 · Inadequate Encryption Strength
Published
2019-11-25T23:25Z
EPSS history
Timeline
  • 25 NOV 23:25Z
    In Philips IntelliBridge EC40 and EC80, IntelliBridge EC40 Hub all versions, and IntelliBridge EC80 Hub all versions, the SSH server running on the affected…
    cvelistv5