HIGH🇵🇱 Wersja polska

CVE-2021-27501

CVSS 7.5v3.1pub. 2022-04-01upd. 2024-11-21

Philips Vue PACS versions 12.2.x.x and prior does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Philips Myvue

    APP
    Philips
    < 12.2.1.5

  • Philips Speech

    APP
    Philips
    < 12.2.8.0

  • Philips Vue Motion

    APP
    Philips
    < 12.2.1.5

  • Philips Vue Pacs

    APP
    Philips
    < 12.2.8.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2021-33020HIGH8.2ten sam produkt

Philips Vue PACS versions 12.2.x.x and prior uses a cryptographic key or password past its expiration date, wh...

CVE-2021-33022HIGH7.5ten sam produkt

Philips Vue PACS versions 12.2.x.x and prior transmits sensitive or security-critical data in cleartext in a c...

CVE-2021-33018HIGH7.5ten sam produkt

The use of a broken or risky cryptographic algorithm in Philips Vue PACS versions 12.2.x.x and prior is an unn...

CVE-2023-40704MEDIUM5.7ten sam produkt

The product does not require unique and complex passwords to be created during installation. Using Philips's ...

CVE-2021-39369MEDIUM6.5ten sam produkt

In Philips (formerly Carestream) Vue MyVue PACS through 12.2.x.x, the VideoStream function allows Path Travers...