CVE-2021-27456

🗓️ 23 Mar 2022 19:46:21Reported by icscertType

Philips Gemini PET/CT software stores sensitive information in unsecured removable media

Reporter	Title	Published	Views	Family All 8
CNNVD	Philips Gemini PET/CT Family 访问控制错误漏洞	25 Mar 202100:00	–	cnnvd
Cvelist	CVE-2021-27456 Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Control	23 Mar 202219:46	–	cvelist
EUVD	EUVD-2021-14210	7 Oct 202500:30	–	euvd
ICS	Philips Gemini PET/CT Family	25 Mar 202100:00	–	ics
NVD	CVE-2021-27456	23 Mar 202220:15	–	nvd
Prion	Improper access control	23 Mar 202220:15	–	prion
RedhatCVE	CVE-2021-27456	22 May 202518:35	–	redhatcve
Vulnrichment	CVE-2021-27456 Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Control	23 Mar 202219:46	–	vulnrichment

NVD

Vulners

Node

phillips gemini_882300_firmwareMatch-

AND

phillips gemini_882300Match-

Node

phillips gemini_882160_firmwareMatch-

AND

phillips gemini_882160Match-

Node

phillips gemini_882400_firmwareMatch-

AND

phillips gemini_882400Match-

Node

phillips gemini_882390_firmwareMatch-

AND

phillips gemini_882390Match-

Node

phillips gemini_882410_firmwareMatch-

AND

phillips gemini_882410Match-

Node

phillips gemini_882412_firmwareMatch-

AND

phillips gemini_882412Match-

Node

phillips gemini_882473_firmwareMatch-

AND

phillips gemini_882473Match-

Node

phillips gemini_882470_firmwareMatch-

AND

phillips gemini_882470Match-

Node

phillips gemini_882471_firmwareMatch-

AND

phillips gemini_882471Match-

Node

phillips gemini_882476_firmwareMatch-

AND

phillips gemini_882476Match-

Node

phillips truflight_882438_firmwareMatch-

AND

phillips truflight_882438Match-

[
  {
    "product": "Gemini 16 Slice",
    "vendor": "Philips",
    "versions": [
      {
        "status": "affected",
        "version": "882300"
      }
    ]
  },
  {
    "product": "Gemini Dual",
    "vendor": "Philips",
    "versions": [
      {
        "status": "affected",
        "version": "882160"
      }
    ]
  },
  {
    "product": "Gemini GXL 10 Slice",
    "vendor": "Philips",
    "versions": [
      {
        "status": "affected",
        "version": "882400"
      }
    ]
  },
  {
    "product": "Gemini GXL 6 Slice",
    "vendor": "Philips",
    "versions": [
      {
        "status": "affected",
        "version": "882390"
      }
    ]
  },
  {
    "product": "Gemini GXL 16 Slice",
    "vendor": "Philips",
    "versions": [
      {
        "status": "affected",
        "version": "882410"
      }
    ]
  },
  {
    "product": "GEMINI LXL",
    "vendor": "Philips",
    "versions": [
      {
        "status": "affected",
        "version": "882412"
      }
    ]
  },
  {
    "product": "Gemini TF Ready",
    "vendor": "Philips",
    "versions": [
      {
        "status": "affected",
        "version": "882473"
      }
    ]
  },
  {
    "product": "Gemini TF 16 w/ TOF Performance",
    "vendor": "Philips",
    "versions": [
      {
        "status": "affected",
        "version": "882470"
      }
    ]
  },
  {
    "product": "Gemini TF 64 w/ TOF Performance",
    "vendor": "Philips",
    "versions": [
      {
        "status": "affected",
        "version": "882471"
      }
    ]
  },
  {
    "product": "Gemini TF Big Bore",
    "vendor": "Philips",
    "versions": [
      {
        "status": "affected",
        "version": "882476"
      }
    ]
  },
  {
    "product": "TruFlight Select PET/CT",
    "vendor": "Philips",
    "versions": [
      {
        "status": "affected",
        "version": "882438"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsma-21-084-01
philips	www.philips.com/productsecurity

21 Nov 2024 05:58Current

3.4Low risk

Vulners AI Score3.4

CVSS 22.1

CVSS 3.12.4

EPSS0.00056

SSVC