Philips Patient Information Center iX (PIC iX) and Efficia CM Series
Successful exploitation of these vulnerabilities may allow an attacker unauthorized access to data (including patient data) and create a denial of service resulting in temporary interruption of viewing physiological data at the central station. Exploitation does not enable modification or change to point-of-care devices.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-43552US | medium5.5OT erhöht | — | ||
The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from the Patient Information Center iX (PIC iX) Versions B.02, C.0… | ||||
| CVE-2021-43550US | medium6.5OT erhöht | — | ||
The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information, which affects the communications between Patie… | ||||
| CVE-2021-43548US | medium6.5 | — | ||
Patient Information Center iX (PIC iX) Versions C.02 and C.03 receives input or data, but does not validate or incorrectly validates that the input has the properties required to p… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (12)
- MitigationEfficia CM Series
By default, patient information is not included in archives. When exporting archives that contain patient information, users should store information securely with strong access controls.
- MitigationEfficia CM Series
By default, patient information is not included in archives. When exporting archives that contain patient information, users should store information securely with strong access controls.
- MitigationEfficia CM Series
By default, patient information is not included in archives. When exporting archives that contain patient information, users should store information securely with strong access controls.
- MitigationPatient Information Center iX (PIC iX)
By default, patient information is not included in archives. When exporting archives that contain patient information, users should store information securely with strong access controls.
- MitigationPatient Information Center iX (PIC iX)
By default, patient information is not included in archives. When exporting archives that contain patient information, users should store information securely with strong access controls.
- MitigationPatient Information Center iX (PIC iX)
By default, patient information is not included in archives. When exporting archives that contain patient information, users should store information securely with strong access controls.
- BehobenEfficia CM Series
Philips released a remediation for CVE-2021-43548 in Q3 2021 in PIC iX C.03.06. Philips plans to remediate CVE-2021-43552 and CVE-2021-43550 by end of Q2 of 2023. Users should operate all Philips deployed and supported products within Philips authorized specifications, including Philips approved software, software configuration, system services, and security configuration.
- BehobenEfficia CM Series
Philips released a remediation for CVE-2021-43548 in Q3 2021 in PIC iX C.03.06. Philips plans to remediate CVE-2021-43552 and CVE-2021-43550 by end of Q2 of 2023. Users should operate all Philips deployed and supported products within Philips authorized specifications, including Philips approved software, software configuration, system services, and security configuration.
- BehobenEfficia CM Series
Philips released a remediation for CVE-2021-43548 in Q3 2021 in PIC iX C.03.06. Philips plans to remediate CVE-2021-43552 and CVE-2021-43550 by end of Q2 of 2023. Users should operate all Philips deployed and supported products within Philips authorized specifications, including Philips approved software, software configuration, system services, and security configuration.
- BehobenPatient Information Center iX (PIC iX)
Philips released a remediation for CVE-2021-43548 in Q3 2021 in PIC iX C.03.06. Philips plans to remediate CVE-2021-43552 and CVE-2021-43550 by end of Q2 of 2023. Users should operate all Philips deployed and supported products within Philips authorized specifications, including Philips approved software, software configuration, system services, and security configuration.
- BehobenPatient Information Center iX (PIC iX)
Philips released a remediation for CVE-2021-43548 in Q3 2021 in PIC iX C.03.06. Philips plans to remediate CVE-2021-43552 and CVE-2021-43550 by end of Q2 of 2023. Users should operate all Philips deployed and supported products within Philips authorized specifications, including Philips approved software, software configuration, system services, and security configuration.
- BehobenPatient Information Center iX (PIC iX)
Philips released a remediation for CVE-2021-43548 in Q3 2021 in PIC iX C.03.06. Philips plans to remediate CVE-2021-43552 and CVE-2021-43550 by end of Q2 of 2023. Users should operate all Philips deployed and supported products within Philips authorized specifications, including Philips approved software, software configuration, system services, and security configuration.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan