title: Philips IntelliBridge EC 40 and EC 80 Hub Authentication Bypass Using an Alternate Path or Channel
description: The standard access path of the IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) requires authentication, but the product has an alternate path or channel that does not require authentication.
problem types: CWE-288 Authentication Bypass Using an Alternate Path or Channel
affected:
{
product: IntelliBridge EC 40 Hub
vendor: Philips
versions:
lessThanOrEqual: C.00.04, status: affected, version: unspecified, versionType: custom
}
{
product: IntelliBridge EC 80 Hub
vendor: Philips
versions:
lessThanOrEqual: C.00.04, status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 8.1
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
version: 3.1
]