CVE-2019-18241

Published: Nov 26, 2019Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

In Philips IntelliBridge EC40 and EC80, IntelliBridge EC40 Hub all versions, and IntelliBridge EC80 Hub all versions, the SSH server running on the affected products is configured to allow weak ciphers. This could enable an unauthorized attacker with access to the network to capture and replay the session and gain unauthorized access to the EC40/80 hub.

Affected (2)

Products: Philips: Intellibridge Ec40 Firmware, Intellibridge Ec80 Firmware

2 products

Intellibridge Ec40 Firmware

Intellibridge Ec80 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellibridge Ec40 Firmware	All versions

Running on/with	Platform Versions
Philips Intellibridge Ec40	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Philips Intellibridge Ec80 Firmware	All versions

Running on/with	Platform Versions
Philips Intellibridge Ec80	All versions

Related CWEs

Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (2)

https://www.us-cert.gov/ics/advisories/icsma-19-318-01

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://www.us-cert.gov/ics/advisories/icsma-19-318-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.