CVE-2021-43552CWE-321

Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of Hard-coded Cryptographic Key

Medium · published December 27, 2021

CVSS v3.1
6.1
EPSS
0%
Percentile
12.7
In the wild
Unconfirmed
What it is

The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from the Patient Information Center iX (PIC iX) Versions B.02, C.02, and C.03.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00226 · 12.7th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2021-12-27T18:48Z
EPSS history
Timeline
  • 27 DEC 18:48Z
    Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of Hard-coded Cryptographic Key
    cvelistv5