CVE-2021-43552

MEDIUM

6.1

Descripcion

The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from the Patient Information Center iX (PIC iX) Versions B.02, C.02, and C.03.

Detalles CVE

Puntuacion CVSS v3.16.1

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Vector de ataqueLOCAL

ComplejidadLOW

Privilegios requeridosLOW

Interaccion usuarioNONE

Publicado12/27/2021

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

philips:patient_information_center_ix

Debilidades (CWE)

CWE-321

Referencias

https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-02(ics-cert@hq.dhs.gov)

https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-02(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.