{"id":"CVE-2021-43548","aliases":["EUVD-2021-30477","GHSA-vqqw-576h-989f"],"status":"published","title":"Philips Patient Information Center iX (PIC iX) and Efficia CM Series Improper Input Validation","description":"Patient Information Center iX (PIC iX) Versions C.02 and C.03 receives input or data, but does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00389,"percentile":0.33344,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2021-12-27T18:48:22Z","modified":"2026-06-17T04:11:06Z","products":[{"vendor":"philips","product":"patient information center ix (pic ix)"},{"vendor":"philips","product":"patient_information_center_ix"}],"references":[{"url":"https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-02","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43548"},{"url":"https://github.com/advisories/GHSA-vqqw-576h-989f"}],"sources":{"cve":[{"id":"CVE-2021-43548","title":"Philips Patient Information Center iX (PIC iX) and Efficia CM Series Improper Input Validation","description":"Patient Information Center iX (PIC iX) Versions C.02 and C.03 receives input or data, but does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.","status":"published","published":"2021-12-27T18:48:22.881Z","modified":"2024-09-16T16:38:33.233Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:32:56.689433Z"}],"euvd":[{"id":"EUVD-2021-30477","description":"Patient Information Center iX (PIC iX) Versions C.02 and C.03 receives input or data, but does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.","status":"published","published":"2021-12-27T18:48:22Z","modified":"2024-09-16T16:38:33Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T00:55:49.526752Z"}],"ghsa":[{"id":"GHSA-vqqw-576h-989f","title":"Patient Information Center iX (PIC iX) Versions C.02 and C.03 receives input or data, but does...","description":"Patient Information Center iX (PIC iX) Versions C.02 and C.03 receives input or data, but does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.","status":"published","published":"2021-12-28T00:00:25Z","modified":"2023-02-03T05:03:51Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:53:26.410699Z"}],"nvd":[{"id":"CVE-2021-43548","description":"Patient Information Center iX (PIC iX) Versions C.02 and C.03 receives input or data, but does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.","status":"published","published":"2021-12-27T19:15:08.437Z","modified":"2026-06-17T04:11:06.86Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.3,"vector":"AV:A/AC:L/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:07:02.977492Z"}]}}