Philips IntelliBridge EC 40 and EC 80 Hub Use of Hard-coded Credentials
Priority LOW 38CWE-798Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-798.
Summary
IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) contains hard-coded credentials, such as a password or a cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
Why it matters now
EPSS 0.0029 21st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Philips | IntelliBridge EC 40 Hub | up to C.00.04 | — | No fix listed | CNA |
| Philips | IntelliBridge EC 80 Hub | up to C.00.04 | — | No fix listed | CNA |
- IntelliBridge EC 40 Hub VendorPhilips Affected up to C.00.04 Fixed in — No fix listed CNA
- IntelliBridge EC 80 Hub VendorPhilips Affected up to C.00.04 Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:philips:intellibridge_ec40_firmware:*:*:*:*:*:*:*:* | up to c.00.04 | Vulnerable | Philips |
| cpe:2.3:h:philips:intellibridge_ec40:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Philips |
| cpe:2.3:o:philips:intellibridge_ec80_firmware:*:*:*:*:*:*:*:* | up to c.00.04 | Vulnerable | Philips |
| cpe:2.3:h:philips:intellibridge_ec80:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Philips |
- cpe:2.3:o:philips:intellibridge_ec40_firmware:*:*:*:*:*:*:*:* Versions up to c.00.04 Vulnerable ·Philips
- cpe:2.3:h:philips:intellibridge_ec40:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Philips
- cpe:2.3:o:philips:intellibridge_ec80_firmware:*:*:*:*:*:*:*:* Versions up to c.00.04 Vulnerable ·Philips
- cpe:2.3:h:philips:intellibridge_ec80:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Philips
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-32993
- 2026-10-03 Alias added: GHSA-4542-p548-wpv7
References
More Philips Intellibridge Ec40 Firmware vulnerabilities
- TI-2021-12624 Philips IntelliBridge EC 40 and EC 80 Hub Authentication Bypass Using an Alternate Path or Channel CVSS 3.1HIGH 8.8
- TI-2019-13258 In Philips IntelliBridge EC40 and EC80, IntelliBridge EC40 Hub all versions, and… CVSS 3.1MEDIUM 6.5
Sources
- CVE-2021-32993 · CVE Program
- CVE-2021-32993 · NVD
- FIRST EPSS
- GHSA-4542-p548-wpv7 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences