High 8.1HealthcarePublished Dec 27, 2021

CVE-2021-32993Philips IntelliBridge EC 40 and EC 80 Hub Use of Hard-coded Credentials

Updated under an hour ago (Oct 27, 2026, 10:40 PM ET)

Does this affect you?

It affects Philips IntelliBridge EC 40 Hub and 3 other products. Add what you run to find out whether that includes you.

EPSS puts the chance of exploitation in the next 30 days at 0.29%, higher than 21% of scored CVEs.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Philips IntelliBridge EC 40 Hub

Exploited in the last 30 days

IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) contains hard-coded credentials, such as a password or a cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.

CVSS: 8.1 HIGH (v3.1, CNA)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Weakness (CWE): CWE-798
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): 0.29% (percentile 21)
Assigned by: icscert
NVD analysis: Modified
Record last updated: Sep 16, 2024
First seen by InfoSec Signals: Oct 12, 2026

Affected products

Affected products

Philips IntelliBridge EC 40 Hub philips:intellibridge_ec_40_hub (from the name)	from unspecified through C.00.04	CNA record
Philips IntelliBridge EC 80 Hub philips:intellibridge_ec_80_hub (from the name)	from unspecified through C.00.04	CNA record
philips intellibridge_ec40_firmware philips:intellibridge_ec40_firmware	through c.00.04	NVD
philips intellibridge_ec80_firmware philips:intellibridge_ec80_firmware	through c.00.04	NVD

References

References

https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-01	x-refsource-misc, third-party-advisory, us-government-resource

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.