IcscertCVELIST:CVE-2021-33020CVE-2021-33020 Philips Vue PACS Use of a Key Past its Expiration Date
8.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
8.7 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
51.8%
Philips Vue PACS versions 12.2.x.x and prior uses a cryptographic key or password past its expiration date, which diminishes its safety significantly by increasing the timing window for cracking attacks against that key.
CNA Affected
[
{
"product": "Vue PACS",
"vendor": "Philips",
"versions": [
{
"lessThanOrEqual": "12.2.x.x",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "Vue MyVue",
"vendor": "Philips",
"versions": [
{
"lessThanOrEqual": "12.2.x.x",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "Vue Speech",
"vendor": "Philips",
"versions": [
{
"lessThanOrEqual": "12.2.x.x",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "Vue Motion",
"vendor": "Philips",
"versions": [
{
"lessThanOrEqual": "12.2.1.5",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
8.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
8.7 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
51.8%