Vulnerability in Philips Intellibridge Ec40
CVE-2019-18241
In Philips IntelliBridge EC40 and EC80, IntelliBridge EC40 Hub all versions, and IntelliBridge EC80 Hub all versions, the SSH server running on the affected products is configured to allow weak ciphers. This could enable an unauthorized attacker with access to the network to capture and replay the session and gain unauthorized access to the EC40/80 hub.
EPSS: 0.003 (25.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Philips Intellibridge_ec40
- Philips Intellibridge_ec40_firmware
- Philips Intellibridge_ec80
- Philips Intellibridge_ec80_firmware
- N/a Philips Intellibridge Ec40 And Ec80 — versions IntelliBridge EC40 Hub, all versions, IntelliBridge EC80 Hub, all versions
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2019-18241?
- CVE-2019-18241 is a medium-severity vulnerability in Philips Intellibridge Ec40, classified under Inadequate Encryption Strength. CVSS score: 6.5/10. Published 2019-11-26.
- How severe is CVE-2019-18241?
- Medium severity. CVSS v3 base score is 6.5 out of 10.