ICSMA-22-006-01 Philips Engage Software
CVE-2021-23173

2.6LOW

Key Information:

Vendor
Philips
Status
Engage Software
Vendor
CVE Published:
10 January 2022

Summary

The affected product is vulnerable to an improper access control, which may allow an authenticated user to gain unauthorized access to sensitive data.

Affected Version(s)

Engage Software NA all < 6.2.1

References

https://www.cisa.gov/uscert/ics/advisories/icsma-22-006-01
x_refsource_MISC

CVSS V3.1

Score:
2.6
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Parnassia and S-Unit reported this vulnerability to CISA.
.