What’s Vulnerable › Vulnerabilities

CVE-2021-32993: Philips IntelliBridge EC 40 and EC 80 Hub Use of Hard-coded Credentials

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-12-27 · updated 2026-06-17
• Weakness: CWE-798

Description

IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) contains hard-coded credentials, such as a password or a cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.

Affected products

• Philips Intellibridge Ec40 Firmware: through c.00.04
• Philips Intellibridge Ec80 Firmware: through c.00.04

References

• https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-01
• https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-01

Get alerted when CVE-2021-32993 or the next vulnerability affects your stack