CVE-2021-43552

Philips PIC iX (Patient Information Center iX) and Efficia CM Series are affected by CVE-2021-43552 (hard-coded cryptographic key). Affected PIC iX versions: B.02, C.02, C.03. Root cause: use of a hard-coded key increases the risk of encrypted data recovery, potentially leading to unauthorized da...

Philips Patient Information Center iX (PIC iX) and Efficia CM Series

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable from adjacent network/low attack complexity Vendor: Philips Equipment: Patient Information Center iX PIC iX and Efficia CM Series Vulnerabilities: Improper Input Validation, Use of Hard-coded Cryptographic Key, Use of a Broken or Risky...