What is CVE-2021-32966?

CVE-2021-32966 is a low-severity vulnerability in Philips Interoperability Solution Xds, classified under Cleartext Transmission of Sensitive Information. CVSS score: 3.7/10. Published 2022-05-25.

How severe is CVE-2021-32966?

Low severity. CVSS v3 base score is 3.7 out of 10.

Vulnerability in Philips Interoperability Solution Xds

CVE-2021-32966

Philips Interoperability Solution XDS versions 2.5 through 3.11 and 2018-1 through 2021-1 are vulnerable to clear text transmission of sensitive information when configured to use LDAP via TLS and where the domain controller returns LDAP referrals, which may allow an attacker to remotely read LDAP system credentials.

EPSS: 0.004 (36.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.7 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Philips Interoperability Solution Xds — versions 2.5 through 3.11, 2018-1 through 2021-1
Philips Interoperability_solution_xds

Weakness classification (CWE)

CWE-319 — Cleartext Transmission of Sensitive Information

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC, Mitigation)

Frequently asked questions

What is CVE-2021-32966?: CVE-2021-32966 is a low-severity vulnerability in Philips Interoperability Solution Xds, classified under Cleartext Transmission of Sensitive Information. CVSS score: 3.7/10. Published 2022-05-25.
How severe is CVE-2021-32966?: Low severity. CVSS v3 base score is 3.7 out of 10.