CVE-2021-43550 - CVE House

Back to Database

Status published Medium CVE-2021-43550

Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of a Broken or Risky Cryptographic Algorithm

5.9 CVSS

Vulnerability Description

The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information, which affects the communications between Patient Information Center iX (PIC iX) Versions C.02 and C.03 and Efficia CM Series Revisions A.01 to C.0x and 4.0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-43550

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Younes Dragoni, Andrea Palanca and Ivan Speziale of Nozomi Networks

References

https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-02

More from Philips

View All →

Use of default hardcoded credentials

Unauthenticated Remote Code Execution via .NET Deserialization

3.2.1 Arbitrary File Read in insecure .NET Remoting TCP Channel

Philips Intellispace Cardiovascular (ISCV) Improper Authentication

Philips Intellispace Cardiovascular (ISCV) Use of Weak Credentials

Affected Vendor

Philips

View all reports →

Affected Software

Efficia CM Series, Patient Information Center iX (PIC iX)

Vulnerable Versions:

4.0, A.01, C.02, C.03

Timeline

Official Publish: December 27th, 2021

Last Modified: September 16th, 2024

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1040 Network Sniffing

Credential Access

T1552 Unsecured Credentials

Credential Access

T1557 Adversary-in-the-Middle

T1078 Valid Accounts

T1041 Exfiltration Over C2 Channel