{"id":"CVE-2021-43550","state":"PUBLISHED","title":"Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of a Broken or Risky Cryptographic Algorithm","description":"The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information, which affects the communications between Patient Information Center iX (PIC iX) Versions C.02 and C.03 and Efficia CM Series Revisions A.01 to C.0x and 4.0.","publishedAt":"2021-12-27T18:48:23.613Z","updatedAt":"2024-09-16T19:00:27.450Z","severity":{"score":5.9,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","source":"icscert"},"assigner":"icscert","products":["Philips Efficia CM Series","Philips Patient Information Center iX (PIC iX)"],"affected":[{"vendor":"Philips","product":"Efficia CM Series","versions":[{"version":"4.0","status":"affected"},{"version":"A.01","status":"affected","lessThanOrEqual":"C.0x","versionType":"custom"}]},{"vendor":"Philips","product":"Patient Information Center iX (PIC iX)","versions":[{"version":"C.02","status":"affected"},{"version":"C.03","status":"affected"}]}],"references":["https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-02"],"weaknesses":["CWE-327"],"ingestedAt":"2026-10-29T19:49:07.642Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/43xxx/CVE-2021-43550.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-43550","state":"PUBLISHED","datePublished":"2021-12-27T18:48:23.613Z","dateUpdated":"2024-09-16T19:00:27.450Z","assignerShortName":"icscert","assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateReserved":"2021-11-08T00:00:00.000Z"},"containers":{"cna":{"title":"Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of a Broken or Risky Cryptographic Algorithm","descriptions":[{"lang":"en","value":"The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information, which affects the communications between Patient Information Center iX (PIC iX) Versions C.02 and C.03 and Efficia CM Series Revisions A.01 to C.0x and 4.0."}],"affected":[{"vendor":"Philips","product":"Efficia CM Series","versions":[{"version":"4.0","status":"affected"},{"version":"A.01","status":"affected","lessThanOrEqual":"C.0x","versionType":"custom"}]},{"vendor":"Philips","product":"Patient Information Center iX (PIC iX)","versions":[{"version":"C.02","status":"affected"},{"version":"C.03","status":"affected"}]}],"references":[{"url":"https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-02","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"ADJACENT_NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-327","description":"CWE-327 Use of a Broken or Risky Cryptographic Algorithm","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"icscert","dateUpdated":"2021-12-27T18:48:23.000Z","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6"},"credits":[{"lang":"en","value":"Younes Dragoni, Andrea Palanca and Ivan Speziale of Nozomi Networks"}],"datePublic":"2021-11-18T00:00:00.000Z","source":{"advisory":"ICSMA-21-322-02","discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.0.9"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"ics-cert@hq.dhs.gov","DATE_PUBLIC":"2021-11-18T15:34:00.000Z","ID":"CVE-2021-43550","STATE":"PUBLIC","TITLE":"Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of a Broken or Risky Cryptographic Algorithm"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Efficia CM Series","version":{"version_data":[{"version_affected":"<=","version_name":"A.01","version_value":"C.0x"},{"version_affected":"=","version_value":"4.0"}]}},{"product_name":"Patient Information Center iX (PIC iX)","version":{"version_data":[{"version_affected":"=","version_value":"C.02"},{"version_affected":"=","version_value":"C.03"}]}}]},"vendor_name":"Philips"}]}},"credit":[{"lang":"eng","value":"Younes Dragoni, Andrea Palanca and Ivan Speziale of Nozomi Networks"}],"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information, which affects the communications between Patient Information Center iX (PIC iX) Versions C.02 and C.03 and Efficia CM Series Revisions A.01 to C.0x and 4.0."}]},"generator":{"engine":"Vulnogram 0.0.9"},"impact":{"cvss":{"attackComplexity":"HIGH","attackVector":"ADJACENT_NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-327 Use of a Broken or Risky Cryptographic Algorithm"}]}]},"references":{"reference_data":[{"name":"https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-02","refsource":"MISC","url":"https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-02"}]},"solution":[{"lang":"en"}],"source":{"advisory":"ICSMA-21-322-02","discovery":"UNKNOWN"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-02","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T04:03:08.513Z"}}]}}}