CVE-2021-33017— Philips IntelliBridge EC 40 and EC 80 Hub Authentication Bypass Using an Alternate Path or Channel
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-33017
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Philips IntelliBridge EC 40 and EC 80 Hub Authentication Bypass Using an Alternate Path or Channel
Source: NVD (National Vulnerability Database)
Vulnerability Description
The standard access path of the IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) requires authentication, but the product has an alternate path or channel that does not require authentication.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
使用候选路径或通道进行的认证绕过
Source: NVD (National Vulnerability Database)
Vulnerability Title
Philips IntelliBridge EC80 Hub 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Philips IntelliBridge Enterprise（IBE）是欧洲飞利浦（Philips）公司的一款能够为EHR（电子健康纪录）和Philips临床解决方案之间提供单点联系的解决方案。 Philips IntelliBridge EC 40 and EC 80 Hub存在安全漏洞，该漏洞源于成功利用这些漏洞可能允许攻击者未经授权访问 IntelliBridge EC40 和 80 集线器。这可能允许攻击者执行软件、修改系统配置或查看/更新文件，包括无法识别的患者数据。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Philips | IntelliBridge EC 40 Hub | unspecified ~ C.00.04 | - | |
| Philips | IntelliBridge EC 80 Hub | unspecified ~ C.00.04 | - |
II. Public POCs for CVE-2021-33017
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-33017
请登录查看更多情报信息。
- https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-01x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2021-33017
Same Patch Batch · Philips · 2021-12-27 · 5 CVEs total
| CVE-2021-32993 | 8.1 HIGH | Philips IntelliBridge EC 40 and EC 80 Hub Use of Hard-coded Credentials |
| CVE-2021-43548 | 6.5 MEDIUM | Philips Patient Information Center iX (PIC iX) and Efficia CM Series Improper Input Valida |
| CVE-2021-43552 | 6.1 MEDIUM | Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of Hard-coded Cry |
| CVE-2021-43550 | 5.9 MEDIUM | Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of a Broken or Ri |
IV. Related Vulnerabilities
Same vendor: Philips
- CVE-2026-3562
Philips Hue Bridge hk_hap Ed25519 Signature Verification Aut - CVE-2026-3561
Philips Hue Bridge hk_hap characteristics Heap-based Buffer - CVE-2026-3560
Philips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-base - CVE-2026-3559
Philips Hue Bridge HomeKit Accessory Protocol Static Nonce A - CVE-2026-3558
Philips Hue Bridge HomeKit Accessory Protocol Transient Pair
Same weakness: CWE-288
- CVE-2026-41308
Password Pusher: JSON API `/p.json` file upload alias bypass - CVE-2026-7458
User Verification by PickPlugins <= 2.0.46 - Unauthenticated - CVE-2026-7567
Temporary Login <= 1.0.0 - Authentication Bypass to Account - CVE-2026-40022
Apache Camel Platform HTTP Main: Authentication Bypass on No - CVE-2026-40630
SenseLive X3050 Authentication bypass using an alternate pat
V. Comments for CVE-2021-33017
No comments yet