Hardcoded credentials

2021-12-2719:15:00

PRIOn knowledge base

www.prio-n.com

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

JSON

The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from the Patient Information Center iX (PIC iX) Versions B.02, C.02, and C.03.

CPENameOperatorVersion
patient_information_center_ixeq.2.0-b
patient_information_center_ixeq.2.0-c
patient_information_center_ixeq.3.0-c

Name	Operator	Version
patient_information_center_ix	eq	.2.0-b
patient_information_center_ix	eq	.2.0-c
patient_information_center_ix	eq	.3.0-c

References

www.cisa.gov/uscert/ics/advisories/icsma-21-322-02