{"id":"CVE-2021-43550","aliases":["EUVD-2021-30479","GHSA-7m57-3qxm-fc4j"],"status":"published","title":"Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of a Broken or Risky Cryptographic Algorithm","description":"The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information, which affects the communications between Patient Information Center iX (PIC iX) Versions C.02 and C.03 and Efficia CM Series Revisions A.01 to C.0x and 4.0.","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00233,"percentile":0.14297,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-327"],"published":"2021-12-27T18:48:23Z","modified":"2026-06-17T04:11:07Z","products":[{"vendor":"philips","product":"efficia cm series"},{"vendor":"philips","product":"efficia_cm_firmware"},{"vendor":"philips","product":"patient information center ix (pic ix)"},{"vendor":"philips","product":"patient_information_center_ix"}],"references":[{"url":"https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-02","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43550"},{"url":"https://github.com/advisories/GHSA-7m57-3qxm-fc4j"}],"sources":{"cve":[{"id":"CVE-2021-43550","title":"Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of a Broken or Risky Cryptographic Algorithm","description":"The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information, which affects the communications between Patient Information Center iX (PIC iX) Versions C.02 and C.03 and Efficia CM Series Revisions A.01 to C.0x and 4.0.","status":"published","published":"2021-12-27T18:48:23.613Z","modified":"2024-09-16T19:00:27.45Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:32:56.689433Z"}],"euvd":[{"id":"EUVD-2021-30479","description":"The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information, which affects the communications between Patient Information Center iX (PIC iX) Versions C.02 and C.03 and Efficia CM Series Revisions A.01 to C.0x and 4.0.","status":"published","published":"2021-12-27T18:48:23Z","modified":"2024-09-16T19:00:27Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T00:55:27.162689Z"}],"ghsa":[{"id":"GHSA-7m57-3qxm-fc4j","title":"The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in...","description":"The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information, which affects the communications between Patient Information Center iX (PIC iX) Versions C.02 and C.03 and Efficia CM Series Revisions A.01 to C.0x and 4.0.","status":"published","published":"2021-12-28T00:00:25Z","modified":"2023-02-03T05:03:51Z","cwes":["CWE-327"],"updated_at":"2026-11-02T14:53:26.410699Z"}],"nvd":[{"id":"CVE-2021-43550","description":"The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information, which affects the communications between Patient Information Center iX (PIC iX) Versions C.02 and C.03 and Efficia CM Series Revisions A.01 to C.0x and 4.0.","status":"published","published":"2021-12-27T19:15:08.5Z","modified":"2026-06-17T04:11:07.1Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.3,"vector":"AV:A/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:07:02.977492Z"}]}}