CVE-2021-43548 MEDIUM

CVE-2021-43548: Philips Patient Information Center iX (PIC iX) and Efficia CM Series Improper Input Validation

Vendor Philips
Product Patient Information Center iX (PIC iX)
Weakness CWE-20 · Input validation
Published December 27, 2021
Last update September 16, 2024

CVSS base score

6.5/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

Patient Information Center iX (PIC iX) Versions C.02 and C.03 receives input or data, but does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.

Key dates

02Disclosure timeline

December 27, 2021 CVE published
September 16, 2024 Record updated