{"id":"CVE-2021-33017","aliases":["EUVD-2021-19738","GHSA-mcf9-rwvw-cv27"],"status":"published","title":"Philips IntelliBridge EC 40 and EC 80 Hub Authentication Bypass Using an Alternate Path or Channel","description":"The standard access path of the IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) requires authentication, but the product has an alternate path or channel that does not require authentication.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00483,"percentile":0.41878,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-288"],"published":"2021-12-27T18:48:21Z","modified":"2026-06-17T03:54:01Z","products":[{"vendor":"philips","product":"intellibridge ec 40 hub"},{"vendor":"philips","product":"intellibridge ec 80 hub"},{"vendor":"philips","product":"intellibridge_ec40_firmware"},{"vendor":"philips","product":"intellibridge_ec80_firmware"}],"references":[{"url":"https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-01","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33017"},{"url":"https://github.com/advisories/GHSA-mcf9-rwvw-cv27"}],"sources":{"cve":[{"id":"CVE-2021-33017","title":"Philips IntelliBridge EC 40 and EC 80 Hub Authentication Bypass Using an Alternate Path or Channel","description":"The standard access path of the IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) requires authentication, but the product has an alternate path or channel that does not require authentication.","status":"published","published":"2021-12-27T18:48:21.413Z","modified":"2024-09-16T20:16:50.573Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-288"],"updated_at":"2026-11-02T14:33:10.204494Z"}],"euvd":[{"id":"EUVD-2021-19738","description":"The standard access path of the IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) requires authentication, but the product has an alternate path or channel that does not require authentication.","status":"published","published":"2021-12-27T18:48:21Z","modified":"2024-09-16T20:16:50Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:55:15.468069Z"}],"ghsa":[{"id":"GHSA-mcf9-rwvw-cv27","title":"The standard access path of the IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) requires...","description":"The standard access path of the IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) requires authentication, but the product has an alternate path or channel that does not require authentication.","status":"published","published":"2021-12-28T00:00:25Z","modified":"2023-02-03T05:03:46Z","cwes":["CWE-288"],"updated_at":"2026-11-02T14:53:25.279029Z"}],"nvd":[{"id":"CVE-2021-33017","description":"The standard access path of the IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) requires authentication, but the product has an alternate path or channel that does not require authentication.","status":"published","published":"2021-12-27T19:15:08.23Z","modified":"2026-06-17T03:54:01.117Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5.8,"vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-288"],"updated_at":"2026-11-02T14:07:02.977492Z"}]}}