CVE-2021-43552

Опубликовано: 27 дек. 2021

Источник: nvd

CVSS3: 6.1

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from the Patient Information Center iX (PIC iX) Versions B.02, C.02, and C.03.

Ссылки

https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-02
Third Party Advisory
US Government Resource
https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-02
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:philips:patient_information_center_ix:b.02:*:*:*:*:*:*:*

cpe:2.3:a:philips:patient_information_center_ix:c.02:*:*:*:*:*:*:*

cpe:2.3:a:philips:patient_information_center_ix:c.03:*:*:*:*:*:*:*

EPSS

Процентиль: 21%

0.00068

Низкий

6.1 Medium

CVSS3

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-321

Связанные уязвимости

GHSA-2hxq-hqp9-w42p

github

около 4 лет назад

The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from the Patient Information Center iX (PIC iX) Versions B.02, C.02, and C.03.

EPSS

Процентиль: 21%

0.00068

Низкий

6.1 Medium

CVSS3

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-321