PT-2021-23865 · Philips · Patient Information Center Ix+1

Published 2021-12-27 · Updated 2022-01-12 · CVE-2021-43550

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Patient Information Center iX (PIC iX) versions C.02 through C.03 Efficia CM Series revisions A.01 through C.0x Efficia CM Series version 4.0

Description The use of a broken or risky cryptographic algorithm poses an unnecessary risk, potentially exposing sensitive information. This issue affects communications between the affected systems.

Recommendations For Patient Information Center iX (PIC iX) versions C.02 through C.03, consider updating the cryptographic algorithm to a more secure one. For Efficia CM Series revisions A.01 through C.0x, update the cryptographic algorithm to mitigate the risk. For Efficia CM Series version 4.0, update the cryptographic algorithm to a secure alternative. As a temporary workaround, consider restricting access to sensitive information until a secure cryptographic algorithm is implemented.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2021-43550

Affected Products

Efficia Cm Series

Patient Information Center Ix

References · 5

• https://osv.dev/vulnerability/CVE-2021-43550 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43550 · Security Note
• https://cisa.gov/uscert/ics/advisories/icsma-21-322-02 · Note
• https://t.me/cvenotify/25284 · Telegram Post
• https://t.me/cibsecurity/34692 · Telegram Post