CVE-2021-33017

🗓️ 27 Dec 2021 18:48:21Reported by icscertType

The IntelliBridge EC 40 and 60 Hub has an alternate access path without authentication

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2021-33017	27 Dec 202122:23	–	circl
CNNVD	Philips IntelliBridge EC80 Hub 安全漏洞	18 Nov 202100:00	–	cnnvd
Cvelist	CVE-2021-33017 Philips IntelliBridge EC 40 and EC 80 Hub Authentication Bypass Using an Alternate Path or Channel	27 Dec 202118:48	–	cvelist
EUVD	EUVD-2021-19738	7 Oct 202500:30	–	euvd
ICS	Philips IntelliBridge EC 40 and EC 80 Hub	18 Nov 202100:00	–	ics
NVD	CVE-2021-33017	27 Dec 202119:15	–	nvd
OSV	CVE-2021-33017	27 Dec 202119:15	–	osv
Prion	Authentication flaw	27 Dec 202119:15	–	prion

NVD

Vulners

Node

philips intellibridge_ec40_firmwareRange≤c.00.04

AND

philips intellibridge_ec40Match-

Node

philips intellibridge_ec80_firmwareRange≤c.00.04

AND

philips intellibridge_ec80Match-

[
  {
    "product": "IntelliBridge EC 40 Hub",
    "vendor": "Philips",
    "versions": [
      {
        "lessThanOrEqual": "C.00.04",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "IntelliBridge EC 80 Hub",
    "vendor": "Philips",
    "versions": [
      {
        "lessThanOrEqual": "C.00.04",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsma-21-322-01

21 Nov 2024 06:08Current

8.5High risk

Vulners AI Score8.5

CVSS 25.8

CVSS 3.18.1 - 8.8

EPSS0.00062

CWE-288

intellibridge ec 40 ec 60 hub authentication bypass vulnerability nvd cve-2021-33017