#VU54386 Cleartext transmission of sensitive information in Interoperability Solution XDS

Published: 2021-06-25

Vulnerability identifier: #VU54386

Vulnerability risk: Low


CVE-ID: CVE-2021-32966


Exploitation vector: Local network

Exploit availability:

Vulnerable software:
Interoperability Solution XDS
Hardware solutions / Medical equipment

Vendor: Philips


The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to software uses insecure communication channel to transmit sensitive information when configured to use LDAP via TLS and where the domain controller returns LDAP referrals. A remote attacker with ability to intercept network traffic can remotely read LDAP system credentials.

Install updates from vendor's website.

Vulnerable software versions

Interoperability Solution XDS: 2.5 - 2021-1

Fixed software versions


External links

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

Latest bulletins with this vulnerability