What’s Vulnerable › Vulnerabilities

CVE-2021-33017: Philips IntelliBridge EC 40 and EC 80 Hub Authentication Bypass Using an Alternate Path or Channel

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-12-27 · updated 2026-06-17
• Weakness: CWE-288

Description

The standard access path of the IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) requires authentication, but the product has an alternate path or channel that does not require authentication.

Affected products

• Philips Intellibridge Ec40 Firmware: through c.00.04
• Philips Intellibridge Ec80 Firmware: through c.00.04

References

• https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-01
• https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-01

Get alerted when CVE-2021-33017 or the next vulnerability affects your stack