Skip to main content

    Impact of vulnerabilities CVE-2021-43551 and CVE-2021-43552 on our products

    1. Vulnerability Summary

    CVE-2021-43551
    • Product: PI Vision
    • Vendor: OSIsoft
    • Published: 2021-11-09
    • Description: A remote attacker with write access to PI Vision could inject code into a display. Unauthorized information disclosure, modification, or deletion is possible if a victim views or interacts with the infected display using Microsoft Internet Explorer. 
    CVE-2021-43552
    • Product: Patient Information Center iX (PIC iX)
    • Vendor: Philips
    • Published: 2021-11-18
    • Description: The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from the Patient Information Center iX (PIC iX) Versions B.02, C.02, and C.03.

    2. Impact on our products

    After a review, it was determined that the products and services of UTAX are not affected by these vulnerabilities.