CVE-2021-33017
Assigner: icscert
Published: 2021-11-18T00:00:00
State: PUBLISHED
affected: product: IntelliBridge EC 40 Hub
vendor: Philips
versions: lessThanOrEqual: C.00.04
status: affected
version: unspecified
versionType: custom
product: IntelliBridge EC 80 Hub
vendor: Philips
versions: lessThanOrEqual: C.00.04
status: affected
version: unspecified
versionType: custom
credits: value: Younes Dragoni, Andrea Palanca and Ivan Speziale of Nozomi Networks
datePublic: 2021-11-18T00:00:00
descriptions: value: The standard access path of the IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) requires authentication, but the product has an alternate path or channel that does not require authentication.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 8.1
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
version: 3.1
problemTypes: descriptions: cweId: CWE-288
description: CWE-288 Authentication Bypass Using an Alternate Path or Channel
type: CWE
source: advisory: ICSMA-21-322-01
discovery: UNKNOWN
title: Philips IntelliBridge EC 40 and EC 80 Hub Authentication Bypass Using an Alternate Path or Channel
x_generator: engine: Vulnogram 0.0.9