CVE-2019-18241

6.5 mediumEPSS 0.3%

In Philips IntelliBridge EC40 and EC80, IntelliBridge EC40 Hub all versions, and IntelliBridge EC80 Hub all versions, the SSH server running on the affected products is configured to allow weak ciphers. This could enable an unauthorized attacker with access to the network to capture and replay the session and gain unauthorized access to the EC40/80 hub.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
CWE: CWE-326
Published: 2019-11-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

philips:intellibridge_ec40_firmware
philips:intellibridge_ec80_firmware

References

https://www.us-cert.gov/ics/advisories/icsma-19-318-01
https://www.us-cert.gov/ics/advisories/icsma-19-318-01

Check your stack JSON